last executing test programs:

3m26.592542784s ago: executing program 1 (id=734):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000006d80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x400000000000220, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
ioctl$UFFDIO_UNREGISTER(r1, 0xc018aa06, &(0x7f0000000040)={&(0x7f0000fec000/0x2000)=nil, 0x2000})
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="00002e000000d47c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m23.473851151s ago: executing program 1 (id=745):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
close(r0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000018000000000000005000000851000000500000085000000bb000000a700000000000000180000000000000000000000000000009500000000000000950000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
fcntl$setsig(r1, 0xa, 0x21)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000580))
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x4]}}, {0x0, 0x0, 0xe0, 0x0, @time, {}, {}, @time=@tick=0x80000}], 0x38)
poll(&(0x7f0000000040)=[{r5, 0x10}], 0x1, 0x7)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"})
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x5, 0x5, 0x0, 0x384c4150, [0x41, 0xd618], [0x8, 0x4], 0x1}})
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x0, "c6000000004000"})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m23.07017582s ago: executing program 1 (id=749):
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
accept$phonet_pipe(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70022000000090507"], 0x0) (async)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000280)="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", 0x1000, 0x800, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64)
fcntl$setstatus(r3, 0x4, 0x2800) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) (async)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x30) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

3m22.013813939s ago: executing program 1 (id=753):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x7, 0x20000001}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f000000ac40)={0x2020}, 0x2020)
shutdown(r0, 0x0)

3m21.69723503s ago: executing program 1 (id=757):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prctl$PR_GET_IO_FLUSHER(0x3a)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18)
write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

3m21.449821258s ago: executing program 1 (id=760):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000180)="a4d7a9055bb753396c22b9e62bcf56394411502d856f56f7a481333c9a0eb50430cef64c5953d66a14bc00cc581c907266cd555b60d1e2d6ccf4bd9e4c27cace7d8437754063f749133520c3b1d3de26301235e579fa1ae98485db848d06c480d484cb044709a8134729dea7e3d2d880fd2fc0f1", 0x0, 0x4}, 0x20)
r6 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0xf)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x4e0, 0x270, 0x1a0, 0x460, 0x0, 0xd0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [0x0, 0x0, 0xffffffff], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@empty, @private0, [], [], 'syzkaller0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0xa7}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xb}, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0x104}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

3m21.329993673s ago: executing program 32 (id=760):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000180)="a4d7a9055bb753396c22b9e62bcf56394411502d856f56f7a481333c9a0eb50430cef64c5953d66a14bc00cc581c907266cd555b60d1e2d6ccf4bd9e4c27cace7d8437754063f749133520c3b1d3de26301235e579fa1ae98485db848d06c480d484cb044709a8134729dea7e3d2d880fd2fc0f1", 0x0, 0x4}, 0x20)
r6 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0xf)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x4e0, 0x270, 0x1a0, 0x460, 0x0, 0xd0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [0x0, 0x0, 0xffffffff], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@empty, @private0, [], [], 'syzkaller0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0xa7}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xb}, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0x104}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

2m25.665897588s ago: executing program 3 (id=1002):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000340)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x1}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24064800}, 0x40000)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={<r3=>0x0, 0xaa2dbbb, 0x4, 0x5}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x500}, 0x8)
lseek(r2, 0x1000000, 0x0)
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0xa0000, 0x80)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000400))
getdents(r4, &(0x7f0000000180)=""/98, 0x62)

2m22.368371901s ago: executing program 3 (id=1013):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x2, 0x0, 0x0, @tick=0x1, {0x0, 0x9}, {}, @result}, {0x0, 0x0, 0x2, 0x0, @tick=0x8001, {0x20}, {0x0, 0x2}, @control={0x3, 0x7, 0x7}}], 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e) (async)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0xb, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r5=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4)
syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000200)=@ethtool_regs={0x1d}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
syz_clone3(&(0x7f0000000280)={0x82000000, &(0x7f0000000000)=<r8=>0xffffffffffffffff, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000100), {0x19}, &(0x7f0000000140)=""/20, 0x14, &(0x7f0000000180)=""/38, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58)
syz_open_procfs(r9, &(0x7f0000000200)='net/sockstat6\x00')
syz_open_dev$tty1(0xc, 0x4, 0x1)
r10 = dup(r8)
write$UHID_INPUT(r10, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) (async)
write$UHID_INPUT(r10, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x18}}, 0x20000092)

2m21.109809121s ago: executing program 3 (id=1016):
syz_io_uring_setup(0x1000010c, &(0x7f0000000380)={0x0, 0x20005885, 0x100, 0x1, 0x2}, &(0x7f0000000340)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioperm(0x0, 0xab49, 0x7)
r3 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = fanotify_init(0x4, 0x400)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x500000000000000, 0x0, 0x48)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
timer_create(0xfffffffd, 0x0, &(0x7f00000011c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0)
timer_delete(0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001040)={0x5, 0x2e3893a3cc99e59f, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

2m19.405897083s ago: executing program 3 (id=1027):
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
socket$inet6(0xa, 0x3, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, 0x0, 0x20000000)
sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0)

2m18.893183979s ago: executing program 3 (id=1029):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r4 = getpgrp(0xffffffffffffffff)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0x8, 0x3, 0x2})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\x0e\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x19, 0x4, 0x8, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
fchown(r5, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002640)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf2531000000080001007100000008000300", @ANYRES32=0x0, @ANYBLOB="29136b4aba8834336e11d8d91d500c41fbfbff4d4e2a92b3864fc57848993f5ed6d498d6fdd04eaa89ed50011b733c81163a71a11fef52a2ed7b006f260a7deb423de473b2f4c626bb3c95cf2baa2729b24c2610eec863222bf5d779a7903e443e017417583109afe71ce93d78c6badead1e51211f613119ef8d8eb5", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x40806)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2m18.715770154s ago: executing program 3 (id=1030):
mq_open(&(0x7f0000000000)='&\x00', 0x40, 0x128, &(0x7f0000000040)={0x3b6, 0x9, 0x100000001, 0x2}) (async)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$qrtr(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="db4b23b6e09c40262484ecf5c29a29bcbebe0c34cf1afc15424862981a3c8fa3078d66d772ae5cd9c8bc43966e09619f86668cdb005fc9eaa29cfa1ee94087dd2e046d323c8c908589331529a7b4759b9ef15634b7145610d39ee67f7a5b56788a3eb3fb4688678ea6612dff52f78453c0893d32ef80b760047881dced6598b03a9c6a988661f41b493bca154664675137fdb2dbf06d255cd2b010e46816871b3bf5ff2a2528ffd8b4e6d8c05f44eed8d2a545ae5314972bcbdb33da068275666bbfab16cd6eb1dd68da5359ef72766c2794fc2cedc53f", 0xd7}], 0x1, &(0x7f00000001c0)=[{0x48, 0xff, 0x72fb, "4c0bab469a67374bf340499406e3a5694729019a5b6915c86792da1bee3fddb3d53421960e73b0bfb4cee05d0274d0e33f7267"}], 0x48, 0x20000010}, 0x38) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1, [0xffffffffffff7fff, 0xa0, 0x2, 0x0, 0x7, 0x3]}) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000340)=0x3ff, 0x4) (async)
r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7f, 0x8200)
ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f00000003c0))
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r1, 0x8000000000000000) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>r4, {0xedc}}, './file0\x00'}) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000480)={<r6=>0x0, 0xdad0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000500)={r6, 0x1ff}, &(0x7f0000000540)=0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x10000, 0x3, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
mount_setattr(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xc100, &(0x7f0000000600)={0x70, 0x100080, 0x0, {r5}}, 0x20)
write$selinux_load(r5, &(0x7f0000000640)={0xf97cff8c, 0x8, 'SE Linux', "e0470ff9f4b5ad0f134b20f0"}, 0x1c) (async)
rseq(&(0x7f0000000680)={0x0, 0x0, 0x0, 0xd}, 0x20, 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x114, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a593dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b9f85cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1899236a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x526905e6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6602defc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6251f151}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1647af11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a66a38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fdc7429}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b9d1d30}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x850}, 0x800) (async)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x8002, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r5) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={<r10=>0x0}, &(0x7f0000000a00)=0xc)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb4, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10004810}, 0x40) (async)
userfaultfd(0x1) (async)
socket(0x27, 0xa, 0x1)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r11, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40010)

2m2.247792638s ago: executing program 33 (id=1030):
mq_open(&(0x7f0000000000)='&\x00', 0x40, 0x128, &(0x7f0000000040)={0x3b6, 0x9, 0x100000001, 0x2}) (async)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$qrtr(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="db4b23b6e09c40262484ecf5c29a29bcbebe0c34cf1afc15424862981a3c8fa3078d66d772ae5cd9c8bc43966e09619f86668cdb005fc9eaa29cfa1ee94087dd2e046d323c8c908589331529a7b4759b9ef15634b7145610d39ee67f7a5b56788a3eb3fb4688678ea6612dff52f78453c0893d32ef80b760047881dced6598b03a9c6a988661f41b493bca154664675137fdb2dbf06d255cd2b010e46816871b3bf5ff2a2528ffd8b4e6d8c05f44eed8d2a545ae5314972bcbdb33da068275666bbfab16cd6eb1dd68da5359ef72766c2794fc2cedc53f", 0xd7}], 0x1, &(0x7f00000001c0)=[{0x48, 0xff, 0x72fb, "4c0bab469a67374bf340499406e3a5694729019a5b6915c86792da1bee3fddb3d53421960e73b0bfb4cee05d0274d0e33f7267"}], 0x48, 0x20000010}, 0x38) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1, [0xffffffffffff7fff, 0xa0, 0x2, 0x0, 0x7, 0x3]}) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000340)=0x3ff, 0x4) (async)
r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7f, 0x8200)
ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f00000003c0))
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r1, 0x8000000000000000) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>r4, {0xedc}}, './file0\x00'}) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000480)={<r6=>0x0, 0xdad0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000500)={r6, 0x1ff}, &(0x7f0000000540)=0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x10000, 0x3, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async)
mount_setattr(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xc100, &(0x7f0000000600)={0x70, 0x100080, 0x0, {r5}}, 0x20)
write$selinux_load(r5, &(0x7f0000000640)={0xf97cff8c, 0x8, 'SE Linux', "e0470ff9f4b5ad0f134b20f0"}, 0x1c) (async)
rseq(&(0x7f0000000680)={0x0, 0x0, 0x0, 0xd}, 0x20, 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x114, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a593dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b9f85cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1899236a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x526905e6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6602defc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6251f151}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1647af11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a66a38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fdc7429}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b9d1d30}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x850}, 0x800) (async)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x8002, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r5) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={<r10=>0x0}, &(0x7f0000000a00)=0xc)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb4, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10004810}, 0x40) (async)
userfaultfd(0x1) (async)
socket(0x27, 0xa, 0x1)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r11, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40010)

19.025601503s ago: executing program 5 (id=1481):
fsopen(&(0x7f0000000680)='efs\x00', 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x10007f)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff)
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x0, r5, 0x0, &(0x7f0000368000/0xf000)=nil, 0xf000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r6, 0x0, 0x2fff, 0x60, &(0x7f0000000040)='\x00\x00', 0x5})
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$TIOCPKT(r3, 0x5420, 0x0)
readlink(0x0, &(0x7f0000000240)=""/55, 0x37)
r7 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
setreuid(0x0, 0x0)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)

15.537464738s ago: executing program 5 (id=1499):
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37d8, 0xf423f, 0xfffffffffffffffc, 0x7, 0x200000000001, 0x6, 0x0, 0x0, 0x1175, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x9, 0x2, 0xfffffffffffff111, 0x7, 0x4, 0x200, 0x0, 0xfffffffffffffffd, 0x1fffffffffe, 0xa})
syz_io_uring_setup(0x6c8f, &(0x7f0000000240)={0x0, 0xf4b4, 0x200, 0x1, 0x167}, &(0x7f0000000180), &(0x7f0000002140))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = socket(0x10, 0x2, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0xffbffffd) (async)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0xffbffffd)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000002180)=0x10005, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000002180)=0x10005, 0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$inet(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002240)}], 0x1}, 0x4000151)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = socket$inet6(0xa, 0xa, 0x3e)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c)
r5 = socket$igmp6(0xa, 0x3, 0x2)
io_uring_setup(0x79bf, &(0x7f0000000180)) (async)
r6 = io_uring_setup(0x79bf, &(0x7f0000000180))
close_range(r6, 0xffffffffffffffff, 0x0) (async)
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0)
sendfile(r7, r7, 0x0, 0x40000f63c)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r8 = socket$igmp(0x2, 0x3, 0x2)
signalfd4(r2, &(0x7f0000002100)={[0xfffffffffffeffff]}, 0xfffffffffffffe8f, 0x80000)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000040)={@empty, @multicast2, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49", 0x80000004, 0x0, 0x4, 0x7}, 0x3c)
write$sndseq(r0, &(0x7f00000002c0)=[{0x6, 0x40, 0xff, 0x0, @tick=0x4, {0x7}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x40, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0xfffffffe, 0xffffffff}}, {0x0, 0x0, 0x0, 0x0, @tick=0x7ffe, {0x0, 0xff}, {}, @time}, {0x1, 0x2, 0x3, 0xe, @time={0x9e2, 0xd6}, {0xf, 0xfa}, {0xb5, 0x7}, @control={0x0, 0x2, 0x5f}}, {0xd4, 0x6, 0xe5, 0x2, @time={0x4, 0x2a45}, {0x9, 0x2}, {0x7, 0xf9}, @raw32={[0x5, 0x3]}}], 0xa8)

10.574753772s ago: executing program 5 (id=1527):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r8, @ANYBLOB="05990000000000001800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r5, &(0x7f0000000280)='1', 0x1, 0x8040, &(0x7f0000000200)={0x11, 0x18, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r10 = syz_usb_connect(0x0, 0xd8, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2f, 0x14, 0xcc, 0x20, 0x3f0, 0x421d, 0xbf81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x85, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x7}, @generic={0x9b, 0xf, "bb04a9e24121cfd361d3146576ce9702e3b925484a1b97ac574df7c10efbe82a42852118d857e746bb7a4b5d64f1ab3b9dc0a0867d265850bd550761bb18e5146438deb0175f18f280f9d50327df6f3cf2b50c66f3426738f71ae11f333c4600f143a59177f86c09e74aae3e20b9a697450761ff348867d0e069b47e3a70aa8f6dbc31bbfee6dd46b53d533f2ed63960912b0120e5a2d8a0c1"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r10, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)={0x20, 0x14, 0xf, "c9df71b4eec08dac470000008afc00"}, 0x0, 0x0})

8.905910116s ago: executing program 4 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x6, 0x20}, 0xc)
r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x4, 0x0)
read$msr(r0, &(0x7f0000000240)=""/158, 0x9e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
r1 = eventfd2(0xffffffff, 0x0)
write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8)
read$eventfd(r1, &(0x7f0000000040), 0x8)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
r3 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x1d, 0x2000}})
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
setreuid(r5, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.959411658s ago: executing program 4 (id=1536):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x12000021)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r6, r5, 0xfff})
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
write$binfmt_elf64(r6, 0x0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfb, 0x0, 0x0, '\x00', 0x0, 0x8000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)

7.293784238s ago: executing program 6 (id=1539):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0xa4c283ca01faa6b1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
write$sysctl(0xffffffffffffffff, 0x0, 0x0) (async)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x4fa6, @remote, 0x7}}, 0x4, 0xdbf, 0x5, 0x9, 0x4, 0x8, 0x3}, &(0x7f0000000040)=0x9c)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x2}, 0x8)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000400)="9e", 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

7.105527904s ago: executing program 4 (id=1540):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short}, 0x2) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101301) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) (async)
write$binfmt_misc(r2, &(0x7f00000001c0), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
ioctl$USBDEVFS_IOCTL(r1, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x9, 0x9, 0x8, 0x9}]})

6.933995002s ago: executing program 4 (id=1542):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b3040000000109022400010000000009040000010300000009210000000122050009058103000200000000000000"], 0x0)
mkdir(&(0x7f00000003c0)='./file1\x00', 0x16)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x1121802, &(0x7f00000000c0)='\xbf_Q3\xe7A\xe8\xb7\\\xb3\x83\xc5\xfa\x18\xadX\xeb\x91\xe4Z\x7f#@U\xf5?\x89ej\xd5\x9b8\xf9\x8b\xbaf\xb6\xd4\x10\xad\xda\xc9N\xaa\x15\xf0S\xd5\xbd\x8d\xd5\xdbe2\xb7\xca\xd0d\xf6\xcc\xe2\x89\xde\xd0m#(\xb6\x90\x92\x10\x8f\x83\x92\x17\x89n\xb7\xe8 \xaa\xc3\x05\xbc\x98\t\xd4L\x80\xb3\x13x\xd8\xc2\xfd\xef\xfd6\x18\"\x84\xbb\xf5\xa6\xd6]\x16\xed\xd9G\x98A\x7f\xa8\xf1')
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendfile(r2, r3, 0x0, 0x6)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="262105"], 0x0, 0x0, 0x0, 0x0}, 0x0)

6.933673709s ago: executing program 6 (id=1543):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f12d3ecffec068abedd51a9545e406a04bcb1a31df2e3f35ca467c16582897b7"], 0x48)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a917000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x2000009, "5660359c3245d1ed51000000000000000100", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x80000, "340bcf501922d69f2827001bc50f0000002ddc7d00", <r5=>0xffffffffffffffff})
fchown(0xffffffffffffffff, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5})
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000180)='syzkaller0\x00'})
socket$inet6(0xa, 0x2, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000100)={0x0, 0x13, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000001c0)={r8, 0x2, 0x22540000, 0x0, 0x0, [<r9=>0x0], [0x0, 0x0, 0xffff], [0x0, 0x3, 0x100, 0xd], [0x0, 0x0, 0xfffffffffffffffd]})
r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv2(r10, &(0x7f0000000440)=[{&(0x7f0000000180)=""/247, 0xc}], 0x100000000000031b, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r11=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r11, 0x0)
mremap(&(0x7f000083e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil)

5.938840843s ago: executing program 0 (id=1547):
mkdir(&(0x7f0000000000)='./file0\x00', 0x240)
getxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'user.', '/dev/md0\x00'}, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340))
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
r6 = dup(r5)
write$uinput_user_dev(r6, &(0x7f0000001100)={'syz0\x00', {0x3}, 0x0, [0x10, 0x0, 0x0, 0x0, 0x22f8, 0x0, 0x3, 0xe72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x68a, 0x7a, 0x5ed, 0x0, 0x0, 0x0, 0xc4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4], [0x9, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x45c)
ioctl$UI_DEV_CREATE(r6, 0x5501)
io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000000bc0)=[{0x5, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/183, 0xb7}], &(0x7f0000000280)=[0xffffffffffffffa2]}, {0x5, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/55, 0x37}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/97, 0x61}], &(0x7f0000000680)=[0xdce]}, {0x5, 0x1, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f00000008c0)=""/112, 0x70}], &(0x7f00000009c0)=[0x3, 0xfff]}, {0x5, 0x1, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/20, 0x14}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/11, 0xb}, {&(0x7f0000000a80)=""/97, 0x61}], &(0x7f0000000b80)=[0xcf01, 0x8000, 0xffff, 0x5, 0xc, 0x0]}], 0x4)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c003780"], 0x44}}, 0x0)
write$UHID_DESTROY(r6, &(0x7f0000000c40), 0x4)

5.886026722s ago: executing program 6 (id=1548):
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@remote}, {@multicast1}, {@empty}, {@dev}, {}, {}, {@broadcast}]}, @noop]}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x5, 0x0)
read$msr(r0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffafff)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000040), 0x0, 0x4)
close(r6)
shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0)

5.722212146s ago: executing program 5 (id=1549):
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
socket$inet6(0xa, 0x3, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, 0x0, 0x20000000)
sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r10, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r4, 0x4ad7, 0x0, 0x0, 0x0, 0x0)

5.721452567s ago: executing program 2 (id=1550):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_create(0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/110, 0x1)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000340)={{}, 0x7})
r4 = msgget(0x2, 0x600)
msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x6, 0x800)
msgrcv(r4, &(0x7f0000000000)={0x0, ""/237}, 0xf5, 0x0, 0x2000)

5.297476401s ago: executing program 2 (id=1551):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r3)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x20, 0x9, 0xea, {0xea, 0x22, "4709c59aabef2ff5d3b89256bcebc78a818583c1850894d79210898a232f4ba92c8a630eb55a4aec3d2ef0648c5b10d9e070efc65e553f9120a7925cf05b5d74ff3b2bc8967eefe0d408e6df536f1867d803de78f460176c8c04dda5d70efc5fced9052eb9fb8cf04e83230524c24c948351cb6148a06b9017429e9fb92f1fe93de35f562a650f8e004491b96219603191c272c033454a08784e679404a23a45ebaf32293200b224f1278b09ef641f5ebfaf0a493738e004545344c0047163381273c9cbf0077f5878eaba1d3a0319ca4463fce5850054ca3faa21fa1611bc36b81178a6cf6a4df5"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1e6a928ce989677e}}, &(0x7f0000000080)={0x0, 0xf, 0x6b, {0x5, 0xf, 0x6b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x1, 0x10, 0x4, 0x91}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ce9109510a6a0a6f26731b8a74ef700d"}, @ss_container_id={0x14, 0x10, 0x4, 0xde, "55276f3bdd0cdd889b098ccc1303ea1e"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "edbdf826ed13ef68e61cfa10b705d416"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x3, 0xf, 0x100, [0xffc0, 0x0, 0x0, 0xff30]}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x6, 0x61, "7ec12b11", "2dd87c1a"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0xf, 0xfc, 0x1, 0xfff7, 0x13}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x30, 0x29, "fbb34769481ff42babd90a9152ecedce9074f6c60d93fe4ca3ed7759bbcc8369f857a5ee1414d05398"}, 0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x60, 0x8}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000500)={0x40, 0xb, 0x2, "50db"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "06a7"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x4f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xea}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xda}})

5.253944853s ago: executing program 0 (id=1552):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100000000000000001c"], 0x30}}, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000380)={0x0, 0xfffffffffffffee6, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x8, 0x7f, 0x3, 0x0, [], [0xfffbfffc, 0x29, 0x2, 0xb8f], [0x0, 0x0, 0x80000001], [0x0, 0x4, 0xfffffffffffffffd]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071121b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300))
close_range(r3, 0xffffffffffffffff, 0x0)

5.106205602s ago: executing program 5 (id=1553):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff110701030009"], 0x0)
r1 = syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd361920"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0x6, 0xe1, 0x10, 0x18d1, 0x1eaf, 0xa243, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x30, 0xaa}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

4.474960296s ago: executing program 2 (id=1554):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_usb_connect$cdc_ncm(0x6, 0xb9, &(0x7f0000000280)=ANY=[], 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x230002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xb6)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)

4.287080276s ago: executing program 0 (id=1555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100000000000000001c"], 0x30}}, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000380)={0x0, 0xfffffffffffffee6, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x8, 0x7f, 0x3, 0x0, [], [0xfffbfffc, 0x29, 0x2, 0xb8f], [0x0, 0x0, 0x80000001], [0x0, 0x4, 0xfffffffffffffffd]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071121b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300))
close_range(r3, 0xffffffffffffffff, 0x0)

4.137831623s ago: executing program 6 (id=1556):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000837000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r6, 0x7}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64)
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async, rerun: 64)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x400042)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, <r10=>0x0], &(0x7f0000000900), 0x0, 0x2, 0xfffffffffffffe8d, 0x0, r9})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000240)={0x1, r10, r9}) (async)
r11 = syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) (async)
sched_setscheduler(r11, 0x5, &(0x7f0000000080)=0x20000005) (async)
r12 = getpid()
sched_setaffinity(0x0, 0x41, &(0x7f00000002c0)=0x7) (async)
sched_setscheduler(r12, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f00000000c0))

3.164730956s ago: executing program 4 (id=1557):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x3)
sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x200000400000b4e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
getpid()
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0xc0109207, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000eeffffffffffffff000000000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x2, 0x1000000000000, 0x0})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

2.535254306s ago: executing program 0 (id=1558):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), 0x0, 0x0})
unshare(0x66000400)

2.025796558s ago: executing program 4 (id=1559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
read$FUSE(r6, &(0x7f0000003ec0)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}]}, 0x34}}, 0xc810)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1ec, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0xa}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x6, 0x2, 0x8000, 0x8, 0x4, 0x24a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xa, 0xe, 0xd0, 0x2, 0x2de4, 0x401]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0xa}, {0x6, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0x9}, {0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x1}, {0x7, 0x9}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x6, 0xa}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x3, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x5}, {0x5, 0x3}, {0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0xa}, {0x7}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0x9}, {0x6}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {}, {0x3, 0xa}, {0x2, 0x4}, {0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x1}, {0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x7}, {0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x4, 0x1}, {0x6}, {0x7, 0x7}, {0x6, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x2, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x5, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x4, 0x1}, {0x7, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x6}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x6}, {0x7, 0x1}, {0x2, 0x4}, {0x2, 0xa}, {0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x5}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x5, 0x7}, {0x5, 0x9}, {0x4}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x18, 0x24, 0x5, 0x1b, 0x4, 0x16, 0x12, 0x4, 0x6, 0x30, 0xc, 0x30, 0x60, 0x60, 0x18, 0x18, 0x1, 0x2, 0x2, 0x5, 0x3, 0x0, 0x48, 0xb, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xad, 0x56, 0x5, 0xaa5, 0xffff, 0x3]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x24, 0x24, 0x35, 0x5, 0x3, 0x24, 0x18, 0x16, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x101, 0x8, 0x40, 0x80, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0x0, 0x7, 0x8, 0xd, 0x3ff, 0xb]}}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x44000}, 0x51)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', <r11=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}})
r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r12, 0x0, 0x0)
syz_usb_control_io$hid(r12, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '#\r'}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @main=@item_4={0x3, 0x0, 0x9, "0600"}, @local=@item_012={0x2, 0x2, 0x2, "06c8"}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x9, "d1d61e00"}, @main=@item_4={0x3, 0x0, 0xb, "0b77eae3"}, @main=@item_012={0x2, 0x0, 0x8, "c17b"}]}}, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r11, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @remote}}}})

1.817970672s ago: executing program 0 (id=1560):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x6, 0x20}, 0xc)
r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x4, 0x0)
read$msr(r0, &(0x7f0000000240)=""/158, 0x9e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
r1 = eventfd2(0xffffffff, 0x0)
write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8)
read$eventfd(r1, &(0x7f0000000040), 0x8)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
r3 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x1d, 0x2000}})
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
setreuid(r5, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.627446035s ago: executing program 0 (id=1561):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0xffffffffffffff01}}}, 0x0)
syz_usb_connect(0x5, 0x3d7, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

1.538824343s ago: executing program 6 (id=1562):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00')
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xf, 0x9}, {0xffff}, {0xfff3, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4810)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000300)={0x314, 0x1, 'client0\x00', 0x1, "7e02000000350a00", "3b25d78e50d5db3dcf3ff819bbf0b9d075c6ae974227f2436640bd0c2f5720ee", 0x2, 0x2})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc05c5340, &(0x7f0000000040))
tkill(r0, 0x7)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_script(r9, 0x0, 0xb)
splice(r8, 0x0, r10, 0x0, 0x9, 0x3)
r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r12 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=<r13=>0x0, &(0x7f0000000140)=<r14=>0x0)
syz_io_uring_submit(r13, r14, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0xffffffffffffffff, 0x0})
io_uring_enter(r12, 0x567, 0x0, 0x0, 0x0, 0x0)
r15 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r15, 0x8917, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x0, @loopback}})

1.159992642s ago: executing program 2 (id=1563):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8238ca474c97243b7d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d64200000000b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322", 0x8f}, {&(0x7f0000000580)="8d039b2a7adc54fb5bb208", 0xb}], 0x2, 0x0, 0x0, 0x2400c800}, 0x4000000)
close(r1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x4)

977.905199ms ago: executing program 2 (id=1564):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x230002, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xb6)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)

903.984191ms ago: executing program 6 (id=1565):
bpf$BPF_MAP_CONST_STR_FREEZE(0x3, &(0x7f0000000000), 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
pipe2(0x0, 0x0)
memfd_create(&(0x7f0000000080)='\xdb`\x10\x98[\x00\x00\xa5\xbe\x00\x00\x00\x00\x00\x00\x00\x00?\x90IA\x9e\xfe \x86?\x05y,\xb8\xa0og\xc3\x87\xe1\xc2\xd0\x0eo\f\\\xd1\x973\"\x96l|v7\xf7\x97\x06\xba\xa5\"k\xdd\x8a\xb4\x1c\x05D\xbe:\x9d7W!\x89\xe9\xefW`c\x0fJ{E\xe0\xabHO^N\xfa\xcd.\x01\xa7Pp|\xe8\xbeO\xeb\xf1\xdf[\xa3>S\xa68G\xf0\xbe\x1f\x8df\xb7B\x0f\x8d\xa2!\xda\xd8\xde\xe4\x9fe%{.\xcc*\x9b\x11\x8f\xf5n\x05S\x81\x03\xe5\xdal\x93\x0f[\x93p\x1ecg\x91\x13\xf2T\xf0fp\xbb\xfcYL\x9c\x8f\xf6', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076"], 0x50}}, 0x4008840)

73.796325ms ago: executing program 5 (id=1566):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'wrr\x00', 0x13, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ce903083ab", 0x5, 0xffffffffffffffff)
keyctl$setperm(0x5, r2, 0x80000)
keyctl$get_security(0x11, r2, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20)
keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000180)='\x00', &(0x7f00000001c0))
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x289c, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_dev$dri(0x0, 0x3, 0x22080)
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount(0x0, 0x0, 0x0, 0x24d808, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x202000, &(0x7f0000000440)={[], [], 0x2f})
r6 = openat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x2c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x1)
getdents(r6, &(0x7f0000000300)=""/132, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

0s ago: executing program 2 (id=1567):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x4c, &(0x7f0000000140)="6134aac900c1fb947c0a17540f4c835ca700b927bf13755ba7ca2e57e5b1849a1e2fe19dd3c6539477c927b2aee83e975ba54e773dc6bd35fd547176b6d2b6317e3164ea8fbd72927d6d0777")

kernel console output (not intermixed with test programs):

st-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  322.517041][ T5863] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  322.527744][ T5863] asix 5-1:0.0: probe with driver asix failed with error -71
[  322.548307][ T5863] usb 5-1: USB disconnect, device number 54
[  323.338962][ T5863] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  323.347715][ T3073] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  323.422588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  323.484359][ T9796] SELinux: security_context_str_to_sid () failed with errno=-22
[  323.531815][   T29] audit: type=1400 audit(1735147911.512:1139): avc:  denied  { mounton } for  pid=9792 comm="syz.5.1042" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  323.555594][ T3073] usb 1-1: Using ep0 maxpacket: 16
[  323.566810][ T3073] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  323.647270][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short
[  323.922831][ T5863] usb 5-1: config 6 has an invalid interface number: 200 but max is 0
[  323.935636][ T3073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  323.947574][ T5863] usb 5-1: config 6 has no interface number 0
[  323.964528][ T5863] usb 5-1: config 6 interface 200 has no altsetting 0
[  323.974135][ T5863] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  323.984507][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.996920][ T5863] usb 5-1: Product: syz
[  324.001235][ T5863] usb 5-1: Manufacturer: syz
[  324.001331][ T3073] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  324.017939][ T5863] usb 5-1: SerialNumber: syz
[  324.053690][ T3073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.065087][ T3073] usb 1-1: Product: syz
[  324.069684][ T3073] usb 1-1: Manufacturer: syz
[  324.076227][ T3073] usb 1-1: SerialNumber: syz
[  324.092727][ T3073] usb 1-1: config 0 descriptor??
[  324.125256][ T3073] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  324.185606][ T3073] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  324.265606][   T29] audit: type=1400 audit(1735147911.549:1140): avc:  denied  { append } for  pid=9792 comm="syz.5.1042" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  324.537094][   T29] audit: type=1400 audit(1735147912.494:1141): avc:  denied  { write } for  pid=9804 comm="syz.2.1045" path="socket:[25361]" dev="sockfs" ino=25361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  324.565972][ T9805] overlayfs: failed to clone upperpath
[  324.586377][   T29] audit: type=1400 audit(1735147912.541:1142): avc:  denied  { write } for  pid=9798 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  324.654313][   T29] audit: type=1400 audit(1735147912.588:1143): avc:  denied  { map } for  pid=9798 comm="syz.5.1043" path="socket:[25356]" dev="sockfs" ino=25356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  324.882291][   T29] audit: type=1400 audit(1735147912.588:1144): avc:  denied  { accept } for  pid=9798 comm="syz.5.1043" path="socket:[25356]" dev="sockfs" ino=25356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  325.189292][ T5863] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  325.197413][ T3073] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  325.209388][ T3073] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  325.222255][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  325.255690][ T5863] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  325.264035][ T5863] usb 5-1: media controller created
[  325.281829][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  325.936072][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.117658][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.670889][ T3073] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  326.679220][ T3073] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  326.685981][ T3073] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  326.694899][ T3073] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  326.761641][ T3073] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  326.779813][ T3073] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  326.796395][   T29] audit: type=1400 audit(1735147914.608:1145): avc:  denied  { listen } for  pid=9834 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  326.828747][ T3073] usb 1-1: USB disconnect, device number 69
[  327.136558][ T9827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer.
[  327.160976][ T3073] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  327.332670][ T3073] usb 1-1: Using ep0 maxpacket: 32
[  327.341723][ T3073] usb 1-1: config 5 has an invalid interface number: 164 but max is 0
[  327.351576][ T3073] usb 1-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  327.373046][ T3073] usb 1-1: config 5 has no interface number 0
[  327.389039][ T3073] usb 1-1: config 5 interface 164 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 32
[  327.413403][ T3073] usb 1-1: config 5 interface 164 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  327.441238][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has a duplicate endpoint with address 0x89, skipping
[  327.467148][ T3073] usb 1-1: config 5 interface 164 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 32
[  327.493393][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[  327.508373][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  327.520904][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[  327.532864][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has an endpoint descriptor with address 0x26, changing to 0x6
[  327.601979][ T3073] usb 1-1: config 5 interface 164 altsetting 6 endpoint 0x6 has an invalid bInterval 216, changing to 11
[  327.634930][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  327.649487][ T3073] usb 1-1: config 5 interface 164 altsetting 6 has 11 endpoint descriptors, different from the interface descriptor's value: 10
[  327.670463][ T3073] usb 1-1: config 5 interface 164 has no altsetting 0
[  327.687090][ T3073] usb 1-1: New USB device found, idVendor=2040, idProduct=7270, bcdDevice=81.bd
[  327.697025][ T5863] dvb-usb: bulk message failed: -110 (6/0)
[  327.709677][ T3073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.729597][ T3073] usb 1-1: Product: 袯룼梖즎絗撋뱉焣䖉岉㲀�ꕨ淗幱�့㛼✧鰅莌滃�⸋儜瓰௸˓�ዣ�쾽�⢩�抄羲淗凷➡嚑㛇䶗忈몧ⷰ㾒☔�
[  327.773760][ T3073] usb 1-1: Manufacturer: ã ¶
[  327.795228][ T3073] usb 1-1: SerialNumber: ࡃ
[  327.810775][ T9836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  327.823480][ T9836] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  327.838459][ T5863] dvb-usb: bulk message failed: -71 (6/0)
[  327.845665][ T5863] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  327.874713][ T5863] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  327.937904][ T5863] dvb-usb: schedule remote query interval to 150 msecs.
[  327.962950][ T5863] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  328.205732][ T5863] usb 5-1: USB disconnect, device number 55
[  328.228726][ T3073] usb 1-1: USB disconnect, device number 70
[  328.429025][ T5863] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  329.961899][ T5863] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  330.133952][ T5863] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.159513][ T5863] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.186369][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0
[  330.210222][ T5863] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  330.255469][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.299150][ T5863] usb 6-1: config 0 descriptor??
[  330.642527][   T29] audit: type=1400 audit(1735147918.210:1146): avc:  denied  { mount } for  pid=9880 comm="syz.2.1065" name="/" dev="hugetlbfs" ino=26069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  330.749841][ T5863] lenovo 0003:17EF:6009.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0
[  330.942268][ T9891] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1068'.
[  331.000550][   T29] audit: type=1400 audit(1735147918.546:1147): avc:  denied  { getopt } for  pid=9871 comm="syz.5.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  331.504267][ T9896] xt_time: invalid argument - start or stop time greater than 23:59:59
[  331.549947][ T5870] usb 6-1: USB disconnect, device number 18
[  331.757964][   T29] audit: type=1400 audit(1735147919.248:1148): avc:  denied  { append } for  pid=9892 comm="syz.4.1070" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  331.853039][   T29] audit: type=1400 audit(1735147919.313:1149): avc:  denied  { map } for  pid=9892 comm="syz.4.1070" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  331.948839][   T29] audit: type=1400 audit(1735147919.313:1150): avc:  denied  { execute } for  pid=9892 comm="syz.4.1070" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  332.215283][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'.
[  332.233076][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'.
[  332.521516][ T5870] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  332.923877][ T5870] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  332.931284][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  332.957285][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  332.970675][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.991129][ T5870] usb 5-1: Product: syz
[  333.001353][ T5870] usb 5-1: Manufacturer: syz
[  333.013394][ T5870] usb 5-1: SerialNumber: syz
[  333.030076][ T5870] usb 5-1: config 0 descriptor??
[  333.125928][    T8] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  333.320160][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.343474][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.359580][ T9893] xt_policy: too many policy elements
[  333.371546][    T8] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  333.391738][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.415115][    T8] usb 1-1: config 0 descriptor??
[  333.810322][ T3073] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  333.858379][    T8] usbhid 1-1:0.0: can't add hid device: -32
[  333.865919][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  333.971752][ T3073] usb 6-1: Using ep0 maxpacket: 32
[  333.983295][ T3073] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  334.007621][    T8] usb 5-1: USB disconnect, device number 56
[  334.021539][ T3073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  334.052407][ T3073] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  334.065511][ T3073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.103963][ T3073] usb 6-1: Product: syz
[  334.172513][ T3073] usb 6-1: Manufacturer: syz
[  334.182078][ T3073] usb 6-1: SerialNumber: syz
[  334.194322][ T3073] usb 6-1: config 0 descriptor??
[  334.209554][ T3073] usb 6-1: no audio or video endpoints found
[  334.224489][   T29] audit: type=1400 audit(1735147921.558:1151): avc:  denied  { getopt } for  pid=9924 comm="syz.2.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  334.312968][   T29] audit: type=1400 audit(1735147921.633:1152): avc:  denied  { ioctl } for  pid=9926 comm="syz.4.1080" path="socket:[26130]" dev="sockfs" ino=26130 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  334.350110][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.355091][   T29] audit: type=1400 audit(1735147921.633:1153): avc:  denied  { read } for  pid=9926 comm="syz.4.1080" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  334.365545][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.383389][   T29] audit: type=1400 audit(1735147921.680:1154): avc:  denied  { open } for  pid=9926 comm="syz.4.1080" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  334.427986][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1080'.
[  334.431779][   T29] audit: type=1400 audit(1735147921.745:1155): avc:  denied  { ioctl } for  pid=9926 comm="syz.4.1080" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  334.723092][ T9932] mmap: syz.4.1081 (9932): VmData 37859328 exceed data ulimit 15. Update limits or use boot option ignore_rlimit_data.
[  335.185002][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'.
[  335.268714][ T9945] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  335.275935][ T9945] PKCS7: Only support pkcs7_signedData type
[  336.203946][ T5866] usb 1-1: USB disconnect, device number 71
[  336.407079][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  336.417332][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  336.426505][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  336.438079][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  336.447058][ T5140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  336.454595][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  336.528361][ T5866] usb 6-1: USB disconnect, device number 19
[  336.546730][    T8] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  336.723652][    T8] usb 5-1: Using ep0 maxpacket: 32
[  336.758406][    T8] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  336.787024][    T8] usb 5-1: config 0 has no interface number 0
[  336.811725][ T9966] chnl_net:caif_netlink_parms(): no params data found
[  336.830031][    T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  336.856152][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.888739][    T8] usb 5-1: Product: syz
[  336.892928][    T8] usb 5-1: Manufacturer: syz
[  336.920006][    T8] usb 5-1: SerialNumber: syz
[  336.943490][    T8] usb 5-1: config 0 descriptor??
[  336.955902][    T8] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  337.020042][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  337.020057][   T29] audit: type=1400 audit(1735147924.177:1161): avc:  denied  { ioctl } for  pid=9978 comm="syz.5.1094" path="socket:[26840]" dev="sockfs" ino=26840 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  337.352818][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.782227][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.799145][ T9966] bridge_slave_0: entered allmulticast mode
[  337.817874][ T9966] bridge_slave_0: entered promiscuous mode
[  337.836490][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.845935][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.855144][ T9966] bridge_slave_1: entered allmulticast mode
[  337.868682][ T9966] bridge_slave_1: entered promiscuous mode
[  338.132252][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1095'.
[  338.638510][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.647917][ T5824] Bluetooth: hci5: command tx timeout
[  338.702086][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.987300][ T9966] team0: Port device team_slave_0 added
[  339.002808][ T9966] team0: Port device team_slave_1 added
[  339.023301][    T8] usb 5-1: qt2_attach - failed to power on unit: -71
[  339.038092][    T8] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  339.056114][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.064540][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.085903][   T29] audit: type=1400 audit(1735147926.104:1162): avc:  denied  { write } for  pid=10003 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  339.111378][    T8] usb 5-1: USB disconnect, device number 58
[  339.206960][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.296882][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.303879][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.330163][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.259458][ T9966] hsr_slave_0: entered promiscuous mode
[  340.278952][ T9966] hsr_slave_1: entered promiscuous mode
[  340.355680][ T9966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.373896][ T9966] Cannot create hsr debugfs directory
[  340.421373][T10013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1100'.
[  340.941673][ T5824] Bluetooth: hci5: command tx timeout
[  342.282581][ T9966] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  342.415185][ T9966] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  342.440973][ T9966] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  342.457292][T10037] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1107'.
[  342.489501][ T9966] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  342.505538][T10037] openvswitch: netlink: Flow key attribute not present in set flow.
[  342.659631][ T9966] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.734354][ T9966] 8021q: adding VLAN 0 to HW filter on device team0
[  342.761725][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.768875][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.799432][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.806527][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.090415][ T5824] Bluetooth: hci5: command tx timeout
[  343.455041][T10058] 9pnet_fd: Insufficient options for proto=fd
[  343.708305][ T9966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.401202][ T9966] veth0_vlan: entered promiscuous mode
[  344.442194][ T9966] veth1_vlan: entered promiscuous mode
[  344.550217][ T9966] veth0_macvtap: entered promiscuous mode
[  344.596467][ T9966] veth1_macvtap: entered promiscuous mode
[  344.645372][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.679796][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.703042][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.737433][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.761597][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.773195][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'.
[  344.782947][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.803787][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.825142][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.835630][   T29] audit: type=1400 audit(1735147931.483:1163): avc:  denied  { ioctl } for  pid=10077 comm="syz.2.1115" path="socket:[26585]" dev="sockfs" ino=26585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  344.860268][    C0] vkms_vblank_simulate: vblank timer overrun
[  344.881434][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  344.884291][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.932746][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.955711][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.975721][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.001783][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.027128][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.048839][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.065025][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.086428][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.111153][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.131319][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.141667][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.163323][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.173130][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.195430][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.205277][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.229950][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.250153][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.280748][ T9966] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.295715][ T9966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.309134][ T9966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.320249][ T9966] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.325648][ T5824] Bluetooth: hci5: command tx timeout
[  345.378966][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'.
[  345.681032][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.643366][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.680006][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.739770][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.182013][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'.
[  347.197091][   T29] audit: type=1400 audit(1735147933.700:1164): avc:  denied  { accept } for  pid=10113 comm="syz.6.1087" path="socket:[27642]" dev="sockfs" ino=27642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  347.223143][T10115] vivid-003: =================  START STATUS  =================
[  347.229091][T10115] vivid-003: RDS Tx I/O Mode: Controls
[  347.229146][T10115] vivid-003: RDS Program ID: 32904
[  347.229168][T10115] vivid-003: RDS Program Type: 3
[  347.229187][T10115] vivid-003: RDS PS Name: VIVID-TX
[  347.229207][T10115] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[  347.229229][T10115] vivid-003: RDS Stereo: true
[  347.229248][T10115] vivid-003: RDS Artificial Head: false
[  347.229267][T10115] vivid-003: RDS Compressed: false
[  347.229286][T10115] vivid-003: RDS Dynamic PTY: false
[  347.229305][T10115] vivid-003: RDS Traffic Announcement: false
[  347.229330][T10115] vivid-003: RDS Traffic Program: true
[  347.229349][T10115] vivid-003: RDS Music: true
[  347.229368][T10115] vivid-003: ==================  END STATUS  ==================
[  347.259653][T10120] tipc: Started in network mode
[  347.312398][   T29] audit: type=1400 audit(1735147933.756:1165): avc:  denied  { getopt } for  pid=10113 comm="syz.6.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  347.316465][T10120] tipc: Node identity 5ae1fe028891, cluster identity 4711
[  347.333537][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10111 comm=syz.5.1125
[  347.342490][T10120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.549213][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1127'.
[  347.604717][T10133] No such timeout policy "syz1"
[  347.674447][T10137] netlink: 'syz.0.1129': attribute type 10 has an invalid length.
[  347.718660][T10138] futex_wake_op: syz.4.1126 tries to shift op by -1; fix this program
[  347.991157][T10137] bond0: (slave bond_slave_0): Releasing backup interface
[  348.240373][   T29] audit: type=1326 audit(1735147934.663:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.6.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  348.275262][   T29] audit: type=1326 audit(1735147934.691:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.6.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  348.342923][   T29] audit: type=1326 audit(1735147934.691:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.6.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  348.532775][ T5863] tipc: Node number set to 3530620418
[  349.065231][   T29] audit: type=1326 audit(1735147934.691:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.6.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  349.159795][   T29] audit: type=1326 audit(1735147934.691:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.6.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  349.183359][    C1] vkms_vblank_simulate: vblank timer overrun
[  349.197686][   T29] audit: type=1326 audit(1735147934.691:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10142 comm="syz.6.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  349.221130][    C1] vkms_vblank_simulate: vblank timer overrun
[  349.364737][    T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  349.626832][T10158] tipc: Can't bind to reserved service type 0
[  349.634583][    T8] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3
[  349.646403][    T8] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  349.657773][    T8] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  349.676032][   T29] audit: type=1400 audit(1735147935.963:1172): avc:  denied  { bind } for  pid=10154 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  349.708041][    T8] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  349.717145][    T8] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0
[  349.725402][    T8] usb 7-1: Manufacturer: syz
[  349.744112][T10147] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  349.947846][T10163] overlayfs: failed to clone upperpath
[  349.975435][    T8] usbhid 7-1:36.0: couldn't find an input interrupt endpoint
[  349.991088][    T8] usb 7-1: USB disconnect, device number 2
[  350.998038][T10175] libceph: resolve '.
[  350.998038][T10175] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  350.998038][T10175] ' (ret=-3): failed
[  351.796401][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1140'.
[  352.159714][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1140'.
[  352.555146][T10188] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  352.881877][    C1] hrtimer: interrupt took 32754 ns
[  353.128572][ T5863] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  353.166960][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  353.166971][   T29] audit: type=1400 audit(1735147939.275:1174): avc:  denied  { ioctl } for  pid=10191 comm="syz.4.1144" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  353.310230][ T5863] usb 6-1: Using ep0 maxpacket: 32
[  353.346404][ T5863] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  353.356481][ T5863] usb 6-1: config 0 has no interface number 0
[  353.365481][ T5863] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  353.383792][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.394745][ T5863] usb 6-1: Product: syz
[  353.400001][ T5863] usb 6-1: Manufacturer: syz
[  353.404848][ T5863] usb 6-1: SerialNumber: syz
[  353.414474][ T5863] usb 6-1: config 0 descriptor??
[  353.422954][ T5863] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  354.719716][T10204] overlayfs: failed to clone upperpath
[  355.262716][T10216] sit0: entered allmulticast mode
[  355.269678][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'.
[  355.298510][T10216] sit0: entered promiscuous mode
[  355.311186][ T5863] usb 6-1: qt2_attach - failed to power on unit: -71
[  355.330714][ T5863] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[  355.352604][ T5863] usb 6-1: USB disconnect, device number 20
[  357.511791][ T5864] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  357.540410][   T29] audit: type=1400 audit(1735147943.362:1175): avc:  denied  { execute_no_trans } for  pid=10253 comm="syz.2.1161" path="/310/file0" dev="tmpfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  357.696024][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'.
[  358.100903][ T5864] usb 5-1: Using ep0 maxpacket: 8
[  358.116865][ T5864] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  358.142005][ T5870] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  358.161734][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  358.194195][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  358.245254][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  358.296024][   T29] audit: type=1400 audit(1735147944.073:1176): avc:  denied  { ioctl } for  pid=10275 comm="syz.5.1166" path="/79/file0/file0" dev="fuse" ino=0 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  358.385408][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  358.405833][    C1] vkms_vblank_simulate: vblank timer overrun
[  358.832743][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  358.841871][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.082231][T10292] overlayfs: failed to clone upperpath
[  359.123470][   T29] audit: type=1400 audit(1735147944.850:1177): avc:  denied  { connect } for  pid=10291 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  359.146687][   T29] audit: type=1400 audit(1735147944.868:1178): avc:  denied  { setopt } for  pid=10291 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  359.173650][ T5864] usb 5-1: GET_CAPABILITIES returned 0
[  359.179316][ T5864] usbtmc 5-1:16.0: can't read capabilities
[  359.371308][ T5870] usb 7-1: device descriptor read/64, error -71
[  359.467647][T10303] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1174'.
[  359.487648][   T29] audit: type=1326 audit(1735147945.186:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.2.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e9d85d29 code=0x0
[  359.500595][T10303] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  359.527410][T10240] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  359.551323][ T3073] usb 5-1: USB disconnect, device number 59
[  359.670534][ T5870] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  360.023384][ T5870] usb 7-1: Using ep0 maxpacket: 32
[  360.032926][ T5870] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  360.041087][ T5870] usb 7-1: config 0 has no interface number 0
[  360.059854][ T5870] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  360.069107][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.083436][ T5870] usb 7-1: Product: syz
[  360.088154][ T5870] usb 7-1: Manufacturer: syz
[  360.092763][ T5870] usb 7-1: SerialNumber: syz
[  360.103460][ T5870] usb 7-1: config 0 descriptor??
[  360.118265][ T5870] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  361.863928][T10329] tty tty31: ldisc open failed (-12), clearing slot 30
[  361.930902][   T29] audit: type=1400 audit(1735147947.244:1180): avc:  denied  { accept } for  pid=10320 comm="syz.5.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  362.045953][   T29] audit: type=1400 audit(1735147947.581:1181): avc:  denied  { listen } for  pid=10331 comm="syz.5.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  362.791816][ T5870] usb 7-1: qt2_attach - failed to power on unit: -71
[  362.820589][ T5870] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71
[  362.988383][ T5870] usb 7-1: USB disconnect, device number 4
[  363.048709][ T5866] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  363.125886][T10355] gtp0: entered promiscuous mode
[  363.618585][ T5866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  363.627611][ T5866] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  363.637894][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  363.647175][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  363.658403][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  363.678712][ T5866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  363.691790][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  363.699883][ T5866] usb 1-1: Product: syz
[  363.704201][ T5866] usb 1-1: Manufacturer: syz
[  364.158188][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  364.168896][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  364.175221][ T5866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  364.181558][ T5866] cdc_wdm 1-1:1.0: Unknown control protocol
[  364.224268][T10338] misc userio: Begin command sent, but we're already running
[  364.512102][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.522744][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.532525][   T29] audit: type=1400 audit(1735147949.910:1182): avc:  denied  { create } for  pid=10349 comm="syz.0.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  364.852292][   T29] audit: type=1400 audit(1735147950.153:1183): avc:  denied  { ioctl } for  pid=10349 comm="syz.0.1186" path="socket:[29278]" dev="sockfs" ino=29278 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  365.041162][    C0] wdm_int_callback: 54 callbacks suppressed
[  365.041184][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  365.041469][ T3073] usb 1-1: USB disconnect, device number 72
[  365.047099][    C0] wdm_int_callback: 54 callbacks suppressed
[  365.047118][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  365.071501][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  365.084892][T10350] cdc_wdm 1-1:1.0: Tx URB error: -19
[  365.625539][   T29] audit: type=1400 audit(1735147950.696:1184): avc:  denied  { getopt } for  pid=10376 comm="syz.5.1192" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  367.179140][T10403] kAFS: unable to lookup cell ''
[  368.135856][   T29] audit: type=1326 audit(358.607:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.4.1204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55d4785d29 code=0x0
[  368.213021][T10387] bridge0: port 3(erspan0) entered blocking state
[  368.281152][   T29] audit: type=1400 audit(358.701:1186): avc:  denied  { read } for  pid=10427 comm="syz.4.1204" dev="sockfs" ino=29406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  368.332183][T10387] bridge0: port 3(erspan0) entered disabled state
[  368.352606][T10387] erspan0: entered allmulticast mode
[  368.367699][T10387] erspan0: entered promiscuous mode
[  368.501447][ T5863] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  368.509393][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  368.640368][T10387] bridge0: port 3(erspan0) entered blocking state
[  368.646907][T10387] bridge0: port 3(erspan0) entered forwarding state
[  368.650830][T10438] dccp_v4_rcv: dropped packet with invalid checksum
[  368.725976][ T5863] usb 7-1: device descriptor read/64, error -32
[  368.918372][ T7870] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  368.992555][ T5863] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  369.370957][ T7870] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  369.381124][ T7870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.397910][ T7870] usb 1-1: config 0 descriptor??
[  369.628058][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.639783][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.650228][ T5863] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  369.659903][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.673325][T10452] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  369.690107][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.701791][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.713286][ T5863] usb 7-1: config 0 descriptor??
[  369.950154][ T7870] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  369.959231][ T7870] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  369.970455][ T7870] [drm:udl_init] *ERROR* Selecting channel failed
[  369.985601][ T7870] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  369.993181][ T7870] [drm] Initialized udl on minor 2
[  369.999764][ T7870] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  370.007741][ T7870] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  370.015465][ T5898] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  370.027065][ T5898] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  370.035388][ T7870] usb 1-1: USB disconnect, device number 73
[  370.042593][ T5898] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  370.402112][ T5863] usbhid 7-1:0.0: can't add hid device: -71
[  370.415053][ T5863] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  370.440006][ T5863] usb 7-1: USB disconnect, device number 6
[  370.450259][   T29] audit: type=1400 audit(360.768:1187): avc:  denied  { read } for  pid=10456 comm="syz.4.1213" name="file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  370.473358][   T29] audit: type=1400 audit(360.768:1188): avc:  denied  { open } for  pid=10456 comm="syz.4.1213" path="/224/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  370.805271][T10464] 9pnet_fd: Insufficient options for proto=fd
[  370.893207][T10467] overlayfs: failed to clone upperpath
[  373.167366][   T29] audit: type=1400 audit(362.947:1189): avc:  denied  { create } for  pid=10480 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  373.287213][   T29] audit: type=1400 audit(362.947:1190): avc:  denied  { prog_load } for  pid=10480 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  373.498591][   T29] audit: type=1400 audit(362.947:1191): avc:  denied  { bpf } for  pid=10480 comm="syz.2.1220" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  373.627380][   T29] audit: type=1400 audit(362.947:1192): avc:  denied  { perfmon } for  pid=10480 comm="syz.2.1220" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  373.741053][T10492] Cannot find add_set index 0 as target
[  373.826811][   T29] audit: type=1400 audit(362.947:1193): avc:  denied  { prog_run } for  pid=10480 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  373.845394][   T29] audit: type=1400 audit(362.957:1194): avc:  denied  { map_create } for  pid=10480 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  373.862444][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'.
[  373.873686][   T29] audit: type=1400 audit(363.443:1195): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  374.072955][   T29] audit: type=1400 audit(363.443:1196): avc:  denied  { search } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  374.135626][ T5866] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  374.545231][ T5866] usb 5-1: Using ep0 maxpacket: 32
[  374.743996][T10516] netlink: 'syz.6.1229': attribute type 21 has an invalid length.
[  374.752044][T10516] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1229'.
[  374.906909][ T5866] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  374.915781][ T5866] usb 5-1: config 0 has no interface number 0
[  374.974726][ T5866] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  374.990079][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.998403][ T5866] usb 5-1: Product: syz
[  375.011854][ T5866] usb 5-1: Manufacturer: syz
[  375.022389][ T5866] usb 5-1: SerialNumber: syz
[  375.032896][    T8] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  375.054237][ T5866] usb 5-1: config 0 descriptor??
[  375.063156][ T5866] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  375.219559][    T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  375.230636][    T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  375.240527][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  375.249905][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.262342][T10507] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  375.341621][    T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  375.670016][ T5866] usb 5-1: qt2_attach - failed to power on unit: -71
[  375.676984][ T5866] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  375.720109][ T5866] usb 5-1: USB disconnect, device number 60
[  375.949177][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  375.949218][   T29] audit: type=1400 audit(365.903:1233): avc:  denied  { ioctl } for  pid=10506 comm="syz.5.1226" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  376.175213][T10530] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13)
[  376.181849][T10530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  376.209066][T10530] vhci_hcd vhci_hcd.0: Device attached
[  376.219242][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'.
[  376.247638][   T29] audit: type=1400 audit(366.156:1234): avc:  denied  { ioctl } for  pid=10536 comm="syz.2.1231" path="socket:[29560]" dev="sockfs" ino=29560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  376.305098][   T29] audit: type=1400 audit(366.212:1235): avc:  denied  { mounton } for  pid=10536 comm="syz.2.1231" path="/330" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  376.379087][T10534] vhci_hcd: connection closed
[  376.388112][   T12] vhci_hcd: stop threads
[  376.397732][   T12] vhci_hcd: release socket
[  376.403102][   T12] vhci_hcd: disconnect device
[  376.444328][    T8] vhci_hcd: vhci_device speed not set
[  376.517217][   T29] audit: type=1326 audit(366.436:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  376.729939][ T5866] usb 6-1: USB disconnect, device number 21
[  376.748967][   T29] audit: type=1326 audit(366.465:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  376.783596][   T29] audit: type=1326 audit(366.465:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  376.828351][   T29] audit: type=1326 audit(366.465:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  376.893952][   T29] audit: type=1326 audit(366.465:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  376.944386][   T29] audit: type=1326 audit(366.465:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  377.071784][   T29] audit: type=1326 audit(366.465:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e9d85d29 code=0x7ffc0000
[  377.432165][T10550] bridge_slave_1: left allmulticast mode
[  377.455144][T10550] bridge_slave_1: left promiscuous mode
[  377.473260][T10550] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.759236][ T5866] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  377.770535][T10554] netlink: 'syz.2.1235': attribute type 1 has an invalid length.
[  377.907465][T10561] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1237'.
[  377.922978][T10561] bridge0: port 3(erspan0) entered disabled state
[  377.929547][T10561] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.936788][T10561] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.953111][ T5866] usb 6-1: config 1 descriptor has 1 excess byte, ignoring
[  377.960510][ T5866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.969239][T10561] bridge0: entered allmulticast mode
[  377.976298][ T5866] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  378.003436][ T5866] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  378.142019][ T5866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  378.162313][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.721555][ T5866] usb 6-1: Product: syz
[  378.725766][ T5866] usb 6-1: Manufacturer: syz
[  378.730391][ T5866] usb 6-1: SerialNumber: syz
[  378.748843][ T5866] cdc_mbim 6-1:1.0: skipping garbage
[  378.754589][ T5866] cdc_mbim 6-1:1.0: skipping garbage
[  378.759973][ T5866] cdc_mbim 6-1:1.0: MBIM functional descriptor missing
[  378.767059][ T5866] cdc_mbim 6-1:1.0: bind() failure
[  378.774425][ T5866] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  378.781408][ T5866] cdc_ncm 6-1:1.1: bind() failure
[  378.975620][ T5898] usb 6-1: USB disconnect, device number 22
[  379.102729][T10583] bridge0: port 3(erspan0) entered blocking state
[  379.116716][T10583] bridge0: port 3(erspan0) entered disabled state
[  379.127594][T10583] erspan0: entered allmulticast mode
[  379.146758][T10583] erspan0: entered promiscuous mode
[  379.157016][T10583] bridge0: port 3(erspan0) entered blocking state
[  379.163506][T10583] bridge0: port 3(erspan0) entered forwarding state
[  380.213971][ T5870] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  380.885927][ T5870] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  381.466428][ T5870] usb 1-1: config 0 has no interface number 0
[  381.472666][ T5870] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.483638][ T5870] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.493742][ T5870] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  381.503088][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.520476][ T5870] usb 1-1: config 0 descriptor??
[  381.832741][   T29] kauditd_printk_skb: 83 callbacks suppressed
[  381.834082][   T29] audit: type=1400 audit(371.385:1326): avc:  denied  { create } for  pid=10602 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  382.066638][   T29] audit: type=1400 audit(371.469:1327): avc:  denied  { create } for  pid=10611 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  382.089581][T10606] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1248'.
[  382.090439][   T29] audit: type=1400 audit(371.656:1328): avc:  denied  { write } for  pid=10602 comm="syz.5.1248" path="socket:[29631]" dev="sockfs" ino=29631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  382.126083][ T5870] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0016/input/input21
[  382.241719][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  382.266699][T10592] delete_channel: no stack
[  382.374323][   T29] audit: type=1400 audit(371.787:1329): avc:  denied  { write } for  pid=10609 comm="syz.6.1249" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  382.411852][   T29] audit: type=1400 audit(371.824:1330): avc:  denied  { read } for  pid=10587 comm="syz.0.1244" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  382.734953][   T29] audit: type=1400 audit(372.086:1331): avc:  denied  { read } for  pid=10609 comm="syz.6.1249" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  382.759327][   T29] audit: type=1400 audit(372.086:1332): avc:  denied  { open } for  pid=10609 comm="syz.6.1249" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  382.824213][   T29] audit: type=1400 audit(372.161:1333): avc:  denied  { mounton } for  pid=10602 comm="syz.5.1248" path="/95/bus" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  382.846201][   T29] audit: type=1400 audit(372.170:1334): avc:  denied  { write } for  pid=10602 comm="syz.5.1248" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  382.868765][   T29] audit: type=1400 audit(372.170:1335): avc:  denied  { open } for  pid=10602 comm="syz.5.1248" path="/95/bus" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  382.926524][ T5870] holtek_kbd 0003:04D9:A055.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1
[  383.074955][T10625] 9pnet_fd: Insufficient options for proto=fd
[  383.510604][ T5866] usb 1-1: reset high-speed USB device number 74 using dummy_hcd
[  384.889694][T10653] QAT: Device 7 not found
[  385.396138][ T5870] usb 1-1: USB disconnect, device number 74
[  385.510846][ T7870] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  385.552494][ T5865] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  385.635177][T10667] tty tty32: ldisc open failed (-12), clearing slot 31
[  385.691795][ T7870] usb 5-1: Using ep0 maxpacket: 32
[  385.698531][ T7870] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  385.716680][ T7870] usb 5-1: config 0 has no interface number 0
[  385.727894][ T7870] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  385.737801][ T7870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.746770][ T7870] usb 5-1: Product: syz
[  385.751389][ T7870] usb 5-1: Manufacturer: syz
[  385.757165][ T7870] usb 5-1: SerialNumber: syz
[  385.769818][ T7870] usb 5-1: config 0 descriptor??
[  385.771882][ T5865] usb 6-1: Using ep0 maxpacket: 32
[  385.779856][ T7870] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  385.787982][ T5865] usb 6-1: config 0 interface 0 has no altsetting 0
[  385.805272][ T5865] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  385.814511][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.823458][ T5865] usb 6-1: Product: syz
[  385.827635][ T5865] usb 6-1: Manufacturer: syz
[  385.832345][ T5865] usb 6-1: SerialNumber: syz
[  385.842506][ T5865] usb 6-1: config 0 descriptor??
[  386.686221][ T7870] usb 5-1: qt2_attach - failed to power on unit: -71
[  386.693254][ T7870] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  386.725425][ T7870] usb 5-1: USB disconnect, device number 61
[  386.773163][T10692] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.1272'.
[  386.894893][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.909179][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.048109][ T5865] gs_usb 6-1:0.0: Configuring for 123 interfaces
[  387.055755][ T5865] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  387.063730][ T5865] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22
[  387.136055][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.146242][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.305885][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  387.305901][   T29] audit: type=1400 audit(376.520:1367): avc:  denied  { ioctl } for  pid=10702 comm="syz.2.1276" path="socket:[29948]" dev="sockfs" ino=29948 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  387.336704][   T29] audit: type=1400 audit(376.520:1368): avc:  denied  { read } for  pid=10702 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  387.358055][   T29] audit: type=1400 audit(376.548:1369): avc:  denied  { setopt } for  pid=10702 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  387.434291][T10705] QAT: Device 7 not found
[  388.065622][ T7870] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  388.810213][ T5862] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  389.038361][ T7870] usb 5-1: Using ep0 maxpacket: 32
[  389.092310][ T7870] usb 5-1: no configurations
[  389.114197][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  389.128397][ T7870] usb 5-1: can't read configurations, error -22
[  389.187563][   T29] audit: type=1400 audit(378.279:1370): avc:  denied  { write } for  pid=10723 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  390.203316][ T5870] usb 6-1: USB disconnect, device number 23
[  390.289128][ T7870] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  390.310344][ T5862] usb 1-1: Using ep0 maxpacket: 32
[  390.413269][ T5862] usb 1-1: config 0 has an invalid interface number: 159 but max is 0
[  390.438605][ T5862] usb 1-1: config 0 has no interface number 0
[  390.444719][ T5862] usb 1-1: config 0 interface 159 has no altsetting 0
[  390.616821][   T29] audit: type=1400 audit(379.560:1371): avc:  denied  { create } for  pid=10725 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  390.636440][   T29] audit: type=1400 audit(379.560:1372): avc:  denied  { connect } for  pid=10725 comm="syz.5.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  390.700716][   T29] audit: type=1400 audit(379.682:1373): avc:  denied  { write } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.722551][   T29] audit: type=1400 audit(379.682:1374): avc:  denied  { remove_name } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.745309][   T29] audit: type=1400 audit(379.682:1375): avc:  denied  { rename } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  390.775735][   T29] audit: type=1400 audit(379.682:1376): avc:  denied  { add_name } for  pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  390.813072][ T5862] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f0.de
[  390.822383][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.830941][ T5862] usb 1-1: Product: syz
[  390.835713][ T5862] usb 1-1: Manufacturer: syz
[  390.840320][ T5862] usb 1-1: SerialNumber: syz
[  390.848495][ T7870] usb 5-1: Using ep0 maxpacket: 32
[  390.866889][ T5862] usb 1-1: config 0 descriptor??
[  390.872150][ T7870] usb 5-1: no configurations
[  390.877296][ T7870] usb 5-1: can't read configurations, error -22
[  390.892616][ T7870] usb usb5-port1: attempt power cycle
[  391.056324][T10734] raw_sendmsg: syz.4.1286 forgot to set AF_INET. Fix it!
[  391.060210][ T5870] usb 1-1: USB disconnect, device number 75
[  391.327862][ T5140] Bluetooth: hci2: command 0x0406 tx timeout
[  391.390537][ T7870] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  391.412459][ T7870] usb 5-1: device descriptor read/8, error -71
[  391.710697][ T7870] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  391.743522][ T7870] usb 5-1: device descriptor read/8, error -71
[  392.359345][ T7870] usb usb5-port1: unable to enumerate USB device
[  392.912598][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  392.912616][   T29] audit: type=1400 audit(381.777:1384): avc:  denied  { read write } for  pid=10748 comm="syz.0.1290" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  392.944133][   T29] audit: type=1400 audit(381.777:1385): avc:  denied  { open } for  pid=10748 comm="syz.0.1290" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  392.967748][   T29] audit: type=1400 audit(381.777:1386): avc:  denied  { mount } for  pid=10748 comm="syz.0.1290" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  393.330898][   T29] audit: type=1400 audit(382.161:1387): avc:  denied  { create } for  pid=10748 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  393.578492][   T29] audit: type=1400 audit(382.394:1388): avc:  denied  { write } for  pid=10759 comm="syz.6.1293" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  393.636289][ T3073] libceph: connect (1)[c::]:6789 error -101
[  393.643313][ T3073] libceph: mon0 (1)[c::]:6789 connect error
[  393.771596][T10760] ceph: No mds server is up or the cluster is laggy
[  393.906856][   T29] audit: type=1400 audit(382.703:1389): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  394.104018][T10767] fuse: Bad value for 'group_id'
[  394.109149][T10767] fuse: Bad value for 'group_id'
[  394.111294][   T29] audit: type=1400 audit(382.890:1390): avc:  denied  { create } for  pid=10768 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  394.138725][   T29] audit: type=1400 audit(382.918:1391): avc:  denied  { bind } for  pid=10768 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  394.158907][   T29] audit: type=1400 audit(382.918:1392): avc:  denied  { write } for  pid=10768 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  394.161880][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'.
[  394.198708][   T29] audit: type=1400 audit(382.974:1393): avc:  denied  { connect } for  pid=10768 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  394.201279][T10772] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  394.232753][T10772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10772 comm=syz.2.1296
[  394.327228][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'.
[  394.374700][T10779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  394.382948][    T8] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  394.395884][T10779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10779 comm=syz.4.1297
[  395.208393][    T8] usb 1-1: config 11 has too many interfaces: 56, using maximum allowed: 32
[  395.218403][    T8] usb 1-1: config 11 has an invalid descriptor of length 214, skipping remainder of the config
[  395.232809][    T8] usb 1-1: config 11 has 0 interfaces, different from the descriptor's value: 56
[  395.292424][    T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  395.313234][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.340813][T10797] SELinux:  Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped).
[  395.485074][T10796] overlayfs: failed to clone upperpath
[  395.605072][T10801] netlink: 'syz.4.1304': attribute type 8 has an invalid length.
[  395.773330][ T5824] Bluetooth: hci5: command tx timeout
[  397.086531][T10815] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1306'.
[  397.104086][T10810] orangefs_mount: mount request failed with -4
[  397.156117][T10815] netlink: 'syz.2.1306': attribute type 13 has an invalid length.
[  397.266043][T10824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10824 comm=syz.6.1310
[  397.677413][ T3073] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  398.120379][    T8] usb 1-1: string descriptor 0 read error: -71
[  398.147353][T10824] netlink: 'syz.6.1310': attribute type 1 has an invalid length.
[  398.158954][    T8] usb 1-1: USB disconnect, device number 76
[  398.205662][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1310'.
[  398.225511][ T3073] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  398.235313][ T3073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.245010][T10824] 8021q: adding VLAN 0 to HW filter on device bond1
[  398.267557][ T3073] usb 5-1: config 0 descriptor??
[  398.325197][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  398.325215][   T29] audit: type=1400 audit(386.838:1415): avc:  denied  { create } for  pid=10838 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  398.386585][   T29] audit: type=1400 audit(386.875:1416): avc:  denied  { setopt } for  pid=10838 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  398.512468][   T29] audit: type=1400 audit(387.015:1417): avc:  denied  { connect } for  pid=10835 comm="syz.0.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  398.580192][   T29] audit: type=1400 audit(387.015:1418): avc:  denied  { write } for  pid=10835 comm="syz.0.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  398.657340][   T29] audit: type=1400 audit(387.043:1419): avc:  denied  { read } for  pid=10835 comm="syz.0.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  398.727991][ T3073] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  398.839038][   T29] audit: type=1400 audit(387.315:1420): avc:  denied  { setopt } for  pid=10850 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  399.120833][   T29] audit: type=1400 audit(387.577:1421): avc:  denied  { read } for  pid=10857 comm="syz.5.1320" name="nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  399.153793][ T3073] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 32: -71
[  399.166247][   T29] audit: type=1400 audit(387.586:1422): avc:  denied  { open } for  pid=10857 comm="syz.5.1320" path="/dev/nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  399.178873][ T3073] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense firmware info: -71
[  399.217064][ T3073] playstation 0003:054C:0DF2.0017: Failed to get firmware info from DualSense
[  399.225689][   T29] audit: type=1400 audit(387.623:1423): avc:  denied  { ioctl } for  pid=10857 comm="syz.5.1320" path="/dev/nbd5" dev="devtmpfs" ino=684 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  399.230675][ T3073] playstation 0003:054C:0DF2.0017: Failed to create dualsense.
[  399.279179][T10859] block nbd5: Device being setup by another task
[  399.313546][ T3073] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71
[  399.349730][   T29] audit: type=1400 audit(387.792:1424): avc:  denied  { bind } for  pid=10857 comm="syz.5.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  399.355889][ T3073] usb 5-1: USB disconnect, device number 66
[  399.589633][T10865] u: renamed from ipvlan0
[  399.621981][T10859] block nbd5: shutting down sockets
[  400.620457][ T3073] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  401.090029][T10889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1326'.
[  401.332456][ T3073] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  401.345429][ T3073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.757946][ T3073] usb 5-1: config 0 descriptor??
[  401.982486][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.995038][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.011533][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.055678][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.336808][ T5866] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  402.509792][ T5866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  402.529380][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'.
[  402.538407][ T5866] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  403.567218][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  403.576306][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  403.587333][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  403.630927][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'.
[  403.743928][ T7870] usb 5-1: USB disconnect, device number 67
[  403.763085][ T5866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  403.774926][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  403.783682][ T5866] usb 1-1: Product: syz
[  403.787918][ T5866] usb 1-1: Manufacturer: syz
[  403.853522][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  403.863275][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  403.871769][ T5866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  403.882528][ T5866] cdc_wdm 1-1:1.0: Unknown control protocol
[  404.901901][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.908539][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  404.917218][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.923830][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  404.930752][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.937358][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  404.944142][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.950748][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  404.957553][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.964158][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  404.974076][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.980681][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  404.987627][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  404.994224][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  405.001218][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  405.007825][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  405.014703][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  405.021293][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  405.028236][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  405.034824][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  405.051245][ T7870] usb 1-1: USB disconnect, device number 77
[  405.051689][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  405.516608][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  405.529477][   T29] audit: type=1400 audit(393.563:1435): avc:  denied  { read write } for  pid=10947 comm="syz.4.1342" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  405.554344][   T29] audit: type=1400 audit(393.563:1436): avc:  denied  { open } for  pid=10947 comm="syz.4.1342" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  405.619382][ T7870] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  405.797765][ T7870] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  405.815935][ T7870] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  405.828568][ T7870] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  405.903800][ T7870] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  405.959732][ T7870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  405.976384][ T7870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  405.992009][ T7870] usb 6-1: SerialNumber: syz
[  406.094775][T10961] 9pnet_fd: Insufficient options for proto=fd
[  406.151806][   T29] audit: type=1400 audit(394.152:1437): avc:  denied  { mounton } for  pid=10960 comm="syz.2.1346" path="/363/file0" dev="tmpfs" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  406.574061][ T7870] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22
[  406.851237][ T7870] usb 6-1: USB disconnect, device number 24
[  407.522291][ T3073] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  407.725450][ T7870] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  407.742925][ T3073] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.764772][ T3073] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  407.789821][ T3073] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  407.798881][ T3073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.841599][ T3073] usb 6-1: config 0 descriptor??
[  407.863022][ T3073] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  407.897511][ T7870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.917940][ T7870] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  407.938946][ T7870] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  407.958855][ T7870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.983188][ T7870] usb 1-1: config 0 descriptor??
[  407.990504][ T7870] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  408.110656][ T7870] usb 6-1: USB disconnect, device number 25
[  408.239941][ T3073] usb 1-1: USB disconnect, device number 78
[  408.268123][   T29] audit: type=1400 audit(396.135:1438): avc:  denied  { bind } for  pid=10984 comm="syz.2.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  408.309047][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'.
[  408.569501][ T5870] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  408.593198][ T7870] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  408.755853][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.029854][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.178313][ T5870] usb 5-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00
[  409.187871][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.213504][ T3073] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  409.239860][ T7870] usb 6-1: Using ep0 maxpacket: 16
[  409.256048][ T7870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.277142][ T7870] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  409.433814][ T7870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.446701][ T3073] usb 1-1: Using ep0 maxpacket: 16
[  409.469267][ T3073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.617456][ T3073] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  409.639598][ T7870] usb 6-1: config 0 descriptor??
[  409.659232][ T3073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.700662][ T5870] usb 5-1: config 0 descriptor??
[  409.705323][ T3073] usb 1-1: config 0 descriptor??
[  409.753353][   T29] audit: type=1400 audit(397.529:1439): avc:  denied  { write } for  pid=11010 comm="syz.2.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  409.823901][   T29] audit: type=1400 audit(397.548:1440): avc:  denied  { ioctl } for  pid=11010 comm="syz.2.1361" path="socket:[30501]" dev="sockfs" ino=30501 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  410.170410][ T5870] apple 0003:05AC:029A.0019: unknown main item tag 0x0
[  410.183961][ T5870] apple 0003:05AC:029A.0019: unknown main item tag 0x0
[  410.214001][ T5870] apple 0003:05AC:029A.0019: unknown main item tag 0x0
[  410.248396][ T5870] apple 0003:05AC:029A.0019: unknown main item tag 0x0
[  410.281059][ T5870] apple 0003:05AC:029A.0019: unknown main item tag 0x0
[  410.414714][   T29] audit: type=1400 audit(398.128:1441): avc:  denied  { write } for  pid=10986 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  410.443596][ T5870] apple 0003:05AC:029A.0019: hidraw0: USB HID v0.03 Device [HID 05ac:029a] on usb-dummy_hcd.4-1/input0
[  410.466139][ T7870] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  410.479285][ T5870] usb 5-1: USB disconnect, device number 68
[  410.479624][ T3073] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  410.491132][   T29] audit: type=1400 audit(398.128:1442): avc:  denied  { read } for  pid=10986 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  410.543310][ T7870] usb 6-1: USB disconnect, device number 26
[  410.660185][   T29] audit: type=1400 audit(398.371:1443): avc:  denied  { watch } for  pid=11014 comm="syz.2.1362" path="/369" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  410.682750][   T29] audit: type=1400 audit(398.371:1444): avc:  denied  { watch_sb } for  pid=11014 comm="syz.2.1362" path="/369" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  410.720576][ T5870] usb 1-1: USB disconnect, device number 79
[  411.642345][T11030] 9pnet_fd: Insufficient options for proto=fd
[  411.830584][ T7870] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  411.924069][T11041] syz.5.1369: attempt to access beyond end of device
[  411.924069][T11041] nbd5: rw=2048, sector=2, nr_sectors = 2 limit=0
[  412.003523][ T7870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.058488][ T7870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.090377][   T29] audit: type=1400 audit(399.699:1445): avc:  denied  { execute } for  pid=11033 comm="syz.5.1369" path="/115/hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  412.137302][ T5824] block nbd5: Receive control failed (result -107)
[  412.138477][ T7870] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  412.182506][ T7870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.209855][ T7870] usb 5-1: config 0 descriptor??
[  412.237723][T11039] nbd5: detected capacity change from 0 to 8589934592
[  412.259928][T10503] block nbd5: Dead connection, failed to find a fallback
[  412.275493][T10503] block nbd5: shutting down sockets
[  412.290691][T10503] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.317260][T10503] Buffer I/O error on dev nbd5, logical block 0, async page read
[  412.325623][T10503] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.336568][T10503] Buffer I/O error on dev nbd5, logical block 1, async page read
[  412.346883][T10503] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.360982][T10503] Buffer I/O error on dev nbd5, logical block 2, async page read
[  412.375844][T10503] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.385190][T10503] Buffer I/O error on dev nbd5, logical block 3, async page read
[  412.409347][T10503] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.432812][T10503] Buffer I/O error on dev nbd5, logical block 0, async page read
[  412.445683][T10503] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.449780][ T7870] usbhid 5-1:0.0: can't add hid device: -71
[  412.457210][T10503] Buffer I/O error on dev nbd5, logical block 1, async page read
[  412.473514][T10503] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.475455][ T7870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  412.483056][T10503] Buffer I/O error on dev nbd5, logical block 2, async page read
[  412.498851][T10503] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.511245][T10503] Buffer I/O error on dev nbd5, logical block 3, async page read
[  412.521069][ T7870] usb 5-1: USB disconnect, device number 69
[  412.523461][T10503] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.556833][T10503] Buffer I/O error on dev nbd5, logical block 0, async page read
[  412.572058][T10503] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.587728][T10503] Buffer I/O error on dev nbd5, logical block 1, async page read
[  412.632366][T10503] ldm_validate_partition_table(): Disk read failed.
[  412.691022][T10503] Dev nbd5: unable to read RDB block 0
[  412.727416][T10503]  nbd5: unable to read partition table
[  412.778428][T10503] ldm_validate_partition_table(): Disk read failed.
[  412.825680][T10503] Dev nbd5: unable to read RDB block 0
[  412.832194][T10503]  nbd5: unable to read partition table
[  413.027392][ T7870] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  413.126675][   T29] audit: type=1400 audit(400.681:1446): avc:  denied  { getopt } for  pid=11054 comm="syz.6.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  413.209570][ T7870] usb 5-1: Using ep0 maxpacket: 16
[  413.221515][ T7870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.241749][ T7870] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  413.250796][ T7870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.309478][ T7870] usb 5-1: config 0 descriptor??
[  413.348040][    T8] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  413.514221][    T8] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  413.546960][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00
[  413.577802][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.971080][ T7870] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  414.014994][    T8] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  414.116374][T10508] udevd[10508]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  414.185563][    T8] usb 5-1: USB disconnect, device number 70
[  414.377011][    T8] usb 6-1: USB disconnect, device number 27
[  414.540486][   T29] audit: type=1400 audit(402.000:1447): avc:  denied  { bind } for  pid=11066 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  414.560685][   T29] audit: type=1400 audit(402.028:1448): avc:  denied  { listen } for  pid=11066 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  414.576631][T11067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1378'.
[  414.581779][   T29] audit: type=1400 audit(402.028:1449): avc:  denied  { connect } for  pid=11066 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  414.610070][   T29] audit: type=1400 audit(402.038:1450): avc:  denied  { accept } for  pid=11066 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  414.630145][   T29] audit: type=1400 audit(402.057:1451): avc:  denied  { shutdown } for  pid=11066 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  414.685925][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1377'.
[  414.695046][   T29] audit: type=1400 audit(402.141:1452): avc:  denied  { nlmsg_write } for  pid=11063 comm="syz.6.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  414.716677][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1377'.
[  414.733087][T11071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  414.821010][   T29] audit: type=1400 audit(402.262:1453): avc:  denied  { name_bind } for  pid=11072 comm="syz.4.1380" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  415.747845][T11087] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  415.889113][   T29] audit: type=1400 audit(403.263:1454): avc:  denied  { ioctl } for  pid=11088 comm="syz.2.1386" path="socket:[31807]" dev="sockfs" ino=31807 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  416.160968][    T8] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  416.374859][    T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  416.392764][    T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  416.411862][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.434637][    T8] usb 1-1: config 0 descriptor??
[  416.442909][    T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  416.717834][    T8] usb 1-1: USB disconnect, device number 80
[  416.772495][T11126] sctp: [Deprecated]: syz.5.1393 (pid 11126) Use of int in maxseg socket option.
[  416.772495][T11126] Use struct sctp_assoc_value instead
[  417.111705][ T3073] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  417.286216][ T3073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.309940][ T3073] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.320348][ T3073] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  417.330206][ T3073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.358342][ T3073] usb 6-1: config 0 descriptor??
[  417.444362][    T8] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  417.500562][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  417.500579][   T29] audit: type=1400 audit(404.741:1473): avc:  denied  { write } for  pid=11156 comm="syz.4.1399" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  418.405894][   T29] audit: type=1400 audit(404.928:1474): avc:  denied  { ioctl } for  pid=11148 comm="syz.6.1398" path="socket:[32790]" dev="sockfs" ino=32790 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  418.650526][    T8] usb 1-1: Using ep0 maxpacket: 16
[  418.665840][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.666264][T11163] usb usb8: usbfs: process 11163 (syz.4.1399) did not claim interface 0 before use
[  418.678141][    T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  418.891267][   T29] audit: type=1400 audit(405.892:1475): avc:  denied  { read } for  pid=11156 comm="syz.4.1399" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  418.918611][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.931391][    T8] usb 1-1: config 0 descriptor??
[  419.105067][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  419.125971][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  419.175807][ T3073] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0
[  419.183984][ T3073] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  419.230541][    T8] usb 1-1: USB disconnect, device number 81
[  419.253052][ T3073] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected
[  419.283127][ T3073] hid-steam 0003:28DE:1142.001E: unknown main item tag 0x0
[  419.338019][ T3073] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  419.791809][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'.
[  419.835903][T11184] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.853720][T11184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11184 comm=syz.4.1403
[  420.173361][T11205] QAT: Device 7 not found
[  420.179819][ T5898] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  420.257961][T11168] 9pnet_fd: Insufficient options for proto=fd
[  420.374888][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.386997][ T5898] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  420.531013][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.543298][ T7870] usb 6-1: reset high-speed USB device number 28 using dummy_hcd
[  420.565249][ T5898] usb 5-1: config 0 descriptor??
[  420.801274][ T5898] usbhid 5-1:0.0: can't add hid device: -71
[  420.812392][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  420.825401][ T5898] usb 5-1: USB disconnect, device number 71
[  421.177575][T11219] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1411'.
[  422.477561][ T3073] usb 6-1: USB disconnect, device number 28
[  423.514306][ T3073] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected
[  423.730128][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'.
[  423.994656][ T3073] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  424.949910][ T3073] usb 6-1: device descriptor read/64, error -71
[  425.301145][T11244] gfs2: gfs2 mount does not exist
[  425.307742][T11244] vcan0: tx drop: invalid sa for name 0x0000000000000080
[  426.647696][ T3073] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  426.689430][T11283] can0: slcan on ptm0.
[  426.742804][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies.
[  426.782757][   T29] audit: type=1400 audit(413.459:1476): avc:  denied  { create } for  pid=11282 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  426.830430][ T3073] usb 6-1: Using ep0 maxpacket: 32
[  426.853992][T11282] can0 (unregistered): slcan off ptm0.
[  426.863316][ T3073] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  426.881585][ T3073] usb 6-1: config 0 has no interface number 0
[  426.915524][ T3073] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  426.951613][ T3073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.976687][ T3073] usb 6-1: Product: syz
[  426.990944][ T3073] usb 6-1: Manufacturer: syz
[  427.004117][ T3073] usb 6-1: SerialNumber: syz
[  427.028171][ T3073] usb 6-1: config 0 descriptor??
[  427.063101][ T3073] smsc95xx v2.0.0
[  427.516950][ T3073] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  427.543130][ T3073] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  428.458465][   T29] audit: type=1400 audit(415.021:1477): avc:  denied  { map } for  pid=11307 comm="syz.6.1430" path="socket:[32097]" dev="sockfs" ino=32097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  428.526027][   T29] audit: type=1400 audit(415.021:1478): avc:  denied  { read accept } for  pid=11307 comm="syz.6.1430" path="socket:[32097]" dev="sockfs" ino=32097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  429.647660][   T29] audit: type=1400 audit(416.134:1479): avc:  denied  { bind } for  pid=11321 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  429.683914][ T7870] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  429.714283][   T29] audit: type=1400 audit(416.134:1480): avc:  denied  { setopt } for  pid=11321 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  429.770469][   T29] audit: type=1400 audit(416.162:1481): avc:  denied  { write } for  pid=11321 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  429.805988][   T29] audit: type=1326 audit(416.284:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  429.822745][ T7870] usb 1-1: device descriptor read/64, error -71
[  429.833776][   T29] audit: type=1326 audit(416.284:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  429.863968][   T29] audit: type=1326 audit(416.331:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  429.896034][   T29] audit: type=1326 audit(416.331:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11332 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f785d29 code=0x7ffc0000
[  429.990231][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'.
[  430.001963][T11335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.014758][T11335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11335 comm=syz.2.1434
[  430.113799][ T7870] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  430.271726][ T7870] usb 1-1: device descriptor read/64, error -71
[  430.389755][ T7870] usb usb1-port1: attempt power cycle
[  430.720686][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.732036][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.750815][ T3073] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  430.762579][ T3073] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  430.785476][ T7870] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  430.793497][ T3073] usb 6-1: USB disconnect, device number 30
[  430.810719][ T7870] usb 1-1: device descriptor read/8, error -71
[  431.074178][ T7870] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  431.095692][ T7870] usb 1-1: device descriptor read/8, error -71
[  431.210847][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1445'.
[  431.212854][ T7870] usb usb1-port1: unable to enumerate USB device
[  431.219902][    T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  431.421805][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1447'.
[  431.440256][T11381] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.453511][T11381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11381 comm=syz.5.1447
[  431.475736][    T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  431.489623][    T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  431.520055][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  431.561192][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  431.586156][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  431.605833][    T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  431.639862][    T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  431.648153][    T8] usb 5-1: Product: syz
[  431.655177][    T8] usb 5-1: Manufacturer: syz
[  431.670168][    T8] cdc_wdm 5-1:1.0: skipping garbage
[  431.680068][    T8] cdc_wdm 5-1:1.0: skipping garbage
[  431.692129][    T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  431.702081][    T8] cdc_wdm 5-1:1.0: Unknown control protocol
[  431.808408][T11397] 9pnet_fd: Insufficient options for proto=fd
[  431.977744][    C1] wdm_int_callback: 14 callbacks suppressed
[  431.977764][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  431.990211][    C1] wdm_int_callback: 14 callbacks suppressed
[  431.990221][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.002609][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.009181][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.015713][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.022281][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.028776][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.035347][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.044366][ T7870] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  432.052375][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.052388][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.059306][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.059317][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.065388][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.065399][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.072945][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.072957][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.079381][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.079392][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.086010][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  432.086020][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  432.180073][ T3073] usb 5-1: USB disconnect, device number 72
[  432.186348][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  432.459560][T11405] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  432.666364][ T7870] usb 6-1: Using ep0 maxpacket: 32
[  432.667590][ T7870] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  433.364924][ T7870] usb 6-1: config 0 has no interface number 0
[  433.371079][ T7870] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.382813][ T7870] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.392560][ T7870] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  433.431503][ T7870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.460267][ T7870] usb 6-1: config 0 descriptor??
[  433.618412][T11420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=11420 comm=syz.2.1459
[  433.634398][T11420] netlink: 'syz.2.1459': attribute type 6 has an invalid length.
[  433.671015][    T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  433.809835][    T8] usb 5-1: device descriptor read/64, error -71
[  434.066438][    T8] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  434.110785][ T7870] uclogic 0003:28BD:0094.001F: pen parameters not found
[  434.117787][ T7870] uclogic 0003:28BD:0094.001F: interface is invalid, ignoring
[  434.206154][    T8] usb 5-1: device descriptor read/64, error -71
[  434.387530][    T8] usb usb5-port1: attempt power cycle
[  434.836166][    T8] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  434.868908][    T8] usb 5-1: device descriptor read/8, error -71
[  435.004090][   T29] kauditd_printk_skb: 43 callbacks suppressed
[  435.004101][   T29] audit: type=1400 audit(421.148:1529): avc:  denied  { mount } for  pid=11437 comm="syz.0.1464" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  435.126952][    T8] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  435.146769][    T8] usb 5-1: device descriptor read/8, error -71
[  435.274746][    T8] usb usb5-port1: unable to enumerate USB device
[  435.329812][   T29] audit: type=1400 audit(421.447:1530): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  435.903606][    T8] usb 6-1: USB disconnect, device number 31
[  436.499555][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  436.759853][   T29] audit: type=1400 audit(422.785:1531): avc:  denied  { mount } for  pid=11458 comm="syz.6.1470" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  437.060234][ T5862] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  437.220798][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  437.234241][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  437.245527][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  437.257408][ T5862] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=58.6f
[  437.267223][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.275898][ T5862] usb 5-1: Product: syz
[  437.280051][ T5862] usb 5-1: Manufacturer: syz
[  437.285278][ T5862] usb 5-1: SerialNumber: syz
[  437.291067][ T5862] usb 5-1: config 0 descriptor??
[  437.297712][ T5862] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected
[  437.305121][ T5862] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87
[  437.312983][ T5862] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  437.323675][ T5862] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  437.332347][ T5862] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  437.345681][ T5862] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  437.354704][ T5862] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  437.367998][ T5862] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  437.476743][    T8] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  437.512514][ T5866] usb 5-1: USB disconnect, device number 77
[  437.520196][ T5866] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  437.530243][ T5866] keyspan 5-1:0.0: device disconnected
[  437.659701][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  437.672953][    T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  437.683621][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.693413][    T8] usb 6-1: config 0 descriptor??
[  437.700056][    T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  437.932267][T11468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.942605][T11468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.952871][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'.
[  437.972453][    T8] usb 6-1: USB disconnect, device number 32
[  438.237641][   T29] audit: type=1400 audit(424.179:1532): avc:  denied  { getopt } for  pid=11482 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  438.265634][   T29] audit: type=1400 audit(424.197:1533): avc:  denied  { bind } for  pid=11482 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  438.286568][   T29] audit: type=1400 audit(424.197:1534): avc:  denied  { read } for  pid=11482 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  438.358779][T11487] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  438.863007][   T29] audit: type=1400 audit(424.759:1535): avc:  denied  { sqpoll } for  pid=11488 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  439.031930][T11494] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  439.205900][T11494] 9pnet_fd: Insufficient options for proto=fd
[  439.587500][ T5866] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  439.753692][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1487'.
[  440.032659][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  440.044008][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.054958][ T5866] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  440.077416][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.107888][ T5866] usb 5-1: config 0 descriptor??
[  440.132002][   T29] audit: type=1400 audit(425.947:1536): avc:  denied  { open } for  pid=11492 comm="syz.5.1481" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  440.206578][   T29] audit: type=1400 audit(425.965:1537): avc:  denied  { map } for  pid=11517 comm="syz.2.1489" path="socket:[32522]" dev="sockfs" ino=32522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  440.238893][   T29] audit: type=1400 audit(425.993:1538): avc:  denied  { ioctl } for  pid=11492 comm="syz.5.1481" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  440.527166][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.632358][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.809958][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.831457][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.168269][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'.
[  442.319220][T11549] overlayfs: failed to clone upperpath
[  442.445988][   T29] audit: type=1400 audit(428.107:1539): avc:  denied  { append } for  pid=11550 comm="syz.5.1499" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  442.528168][ T5866] usbhid 5-1:0.0: can't add hid device: -71
[  442.534273][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  442.546720][ T5866] usb 5-1: USB disconnect, device number 78
[  442.579559][   T29] audit: type=1400 audit(428.238:1540): avc:  denied  { setopt } for  pid=11550 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  442.607192][T11558] input: syz1 as /devices/virtual/input/input22
[  442.628173][   T29] audit: type=1400 audit(428.257:1541): avc:  denied  { ioctl } for  pid=11557 comm="syz.4.1500" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  442.701286][   T29] audit: type=1400 audit(428.341:1542): avc:  denied  { write } for  pid=11557 comm="syz.4.1500" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  443.811184][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1507'.
[  443.823251][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1507'.
[  444.232026][   T29] audit: type=1400 audit(429.772:1543): avc:  denied  { create } for  pid=11592 comm="syz.6.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  444.253508][T11597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40460 sclass=netlink_route_socket pid=11597 comm=syz.2.1513
[  444.267570][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1513'.
[  444.350805][ T5870] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  444.682316][ T5870] usb 5-1: Using ep0 maxpacket: 32
[  444.691877][ T5870] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  444.700033][ T5870] usb 5-1: config 0 has no interface number 0
[  444.711187][ T5870] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  444.720976][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.736776][ T5870] usb 5-1: Product: syz
[  444.741134][ T5870] usb 5-1: Manufacturer: syz
[  445.340399][ T5870] usb 5-1: SerialNumber: syz
[  445.357922][ T5870] usb 5-1: config 0 descriptor??
[  445.450879][ T5870] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  445.631260][T11615] 9p: Unknown Cache mode or invalid value m
[  446.655762][T11617] xt_CT: No such helper "syz1"
[  446.703854][ T5870] usb 5-1: qt2_attach - failed to power on unit: -71
[  446.771455][T11633] QAT: Device 7 not found
[  447.028970][ T5870] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  447.061755][ T5870] usb 5-1: USB disconnect, device number 79
[  447.163862][T11635] ebt_limit: overflow, try lower: 570423552/2483027968
[  447.375158][   T29] audit: type=1400 audit(432.718:1544): avc:  denied  { mount } for  pid=11643 comm="syz.2.1526" name="/" dev="configfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  447.397423][    C1] vkms_vblank_simulate: vblank timer overrun
[  447.631181][   T29] audit: type=1400 audit(432.943:1545): avc:  denied  { listen } for  pid=11643 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.680299][   T29] audit: type=1400 audit(432.943:1546): avc:  denied  { accept } for  pid=11643 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.699263][    C1] vkms_vblank_simulate: vblank timer overrun
[  448.724436][T11654] gtp0: entered promiscuous mode
[  449.195700][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'.
[  449.205019][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'.
[  449.825209][ T5870] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  449.852252][   T29] audit: type=1400 audit(435.038:1547): avc:  denied  { ioctl } for  pid=11659 comm="syz.4.1530" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  450.003012][   T29] audit: type=1400 audit(435.179:1548): avc:  denied  { read } for  pid=11675 comm="syz.4.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  450.023075][ T5870] usb 6-1: Using ep0 maxpacket: 32
[  450.032679][ T5870] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  450.055615][ T5870] usb 6-1: config 0 has no interface number 0
[  450.056533][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'.
[  450.071279][ T5870] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  450.071312][ T5870] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  450.089925][ T5870] usb 6-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice=bf.81
[  450.113390][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.158763][ T5870] usb 6-1: Product: syz
[  450.162962][ T5870] usb 6-1: Manufacturer: syz
[  450.203886][ T5870] usb 6-1: SerialNumber: syz
[  450.226250][ T5870] usb 6-1: config 0 descriptor??
[  450.261926][T11654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.269409][T11654] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.539365][T11688] netlink: 'syz.2.1537': attribute type 39 has an invalid length.
[  450.557319][T11689] 9pnet_fd: Insufficient options for proto=fd
[  450.628695][   T29] audit: type=1400 audit(435.768:1549): avc:  denied  { read } for  pid=11686 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  450.877187][   T29] audit: type=1400 audit(435.992:1550): avc:  denied  { connect } for  pid=11695 comm="syz.4.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  450.881617][T11698] exFAT-fs (nullb0): invalid boot record signature
[  450.914588][T11698] exFAT-fs (nullb0): failed to read boot sector
[  450.922536][T11698] exFAT-fs (nullb0): failed to recognize exfat type
[  451.257358][ T5862] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  451.709488][ T5862] usb 5-1: no configurations
[  451.749515][ T5862] usb 5-1: can't read configurations, error -22
[  451.846529][ T7870] usb 6-1: USB disconnect, device number 33
[  452.039957][ T5862] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  452.081019][T11716] input: syz0 as /devices/virtual/input/input23
[  452.092049][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'.
[  452.151237][T11716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1547'.
[  452.237044][ T5862] usb 5-1: no configurations
[  452.245185][ T5862] usb 5-1: can't read configurations, error -22
[  452.263363][ T5862] usb usb5-port1: attempt power cycle
[  452.850345][ T5862] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  452.880866][   T29] audit: type=1800 audit(437.863:1551): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1548" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  453.174994][ T5870] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  453.395335][ T5870] usb 6-1: Using ep0 maxpacket: 8
[  453.406909][ T5870] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  453.436946][ T5862] usb 5-1: no configurations
[  453.442161][ T5862] usb 5-1: can't read configurations, error -22
[  453.463236][ T5870] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[  453.488490][ T5870] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  453.511046][ T5870] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[  453.522186][ T5870] usb 6-1: config 250 has no interface number 0
[  453.531123][ T5870] usb 6-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  453.545619][ T5870] usb 6-1: config 250 interface 228 has no altsetting 0
[  453.689795][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  453.698020][ T5862] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  453.699876][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  453.728018][ T5862] usb 5-1: no configurations
[  453.731232][ T5870] usb 6-1: Product: syz
[  453.732621][ T5862] usb 5-1: can't read configurations, error -22
[  453.732942][ T5862] usb usb5-port1: unable to enumerate USB device
[  453.741997][ T5870] usb 6-1: SerialNumber: syz
[  454.759957][ T5870] hub 6-1:250.228: bad descriptor, ignoring hub
[  454.766459][ T5870] hub 6-1:250.228: probe with driver hub failed with error -5
[  454.840113][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  455.369794][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.380952][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.534758][T11747] binder: 11740:11747 ioctl c0306201 20000580 returned -22
[  455.556501][   T46] usb 6-1: USB disconnect, device number 34
[  455.562611][   T29] audit: type=1400 audit(440.323:1552): avc:  denied  { read } for  pid=11740 comm="syz.4.1557" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  455.640869][   T29] audit: type=1400 audit(440.323:1553): avc:  denied  { open } for  pid=11740 comm="syz.4.1557" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  455.676948][   T29] audit: type=1400 audit(440.333:1554): avc:  denied  { ioctl } for  pid=11740 comm="syz.4.1557" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  455.758954][   T29] audit: type=1400 audit(440.333:1555): avc:  denied  { set_context_mgr } for  pid=11740 comm="syz.4.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  455.960181][T11754] netlink: 'syz.4.1559': attribute type 10 has an invalid length.
[  455.970352][   T29] audit: type=1400 audit(440.744:1556): avc:  denied  { bind } for  pid=11753 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  456.021035][T11754] team0: Port device netdevsim0 added
[  456.144611][ T5870] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  456.315682][ T5870] usb 6-1: Using ep0 maxpacket: 32
[  456.329091][ T5870] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  456.342256][ T5870] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[  456.352637][ T5870] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  456.368580][ T5870] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[  456.382753][ T5870] usb 6-1: config 250 has no interface number 0
[  456.391021][ T5870] usb 6-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  456.409183][ T5870] usb 6-1: config 250 interface 228 has no altsetting 0
[  456.422899][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  456.437905][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  456.447301][ T5865] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  456.455032][ T5870] usb 6-1: Product: syz
[  456.459354][ T5870] usb 6-1: SerialNumber: syz
[  456.602323][   T46] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  456.634527][ T5865] usb 5-1: Using ep0 maxpacket: 16
[  456.640972][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.651978][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.661806][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  456.674743][ T5865] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  456.686086][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.699588][ T5865] usb 5-1: config 0 descriptor??
[  456.705104][ T5870] usb 6-1: USB disconnect, device number 35
[  456.796780][   T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.809902][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  456.815151][   T29] audit: type=1400 audit(441.549:1557): avc:  denied  { read } for  pid=11764 comm="syz.2.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  456.821817][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  456.851382][   T46] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  456.865712][   T46] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  456.875264][   T46] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  456.883766][   T46] usb 1-1: Manufacturer: syz
[  456.889658][   T46] usb 1-1: config 0 descriptor??
[  457.148978][ T5865] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max
[  457.159138][ T5865] microsoft 0003:045E:07DA.0020: No inputs registered, leaving
[  457.167867][ T5865] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  457.179627][ T5865] microsoft 0003:045E:07DA.0020: no inputs found
[  457.186016][ T5865] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway
[  457.782102][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1565'.
[  457.791399][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1565'.
[  457.800811][   T46] rc_core: IR keymap rc-hauppauge not found
[  457.806703][   T46] Registered IR keymap rc-empty
[  457.812158][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  457.820240][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.829357][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.893875][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  457.962426][T11776] 
[  457.964778][T11776] ======================================================
[  457.971789][T11776] WARNING: possible circular locking dependency detected
[  457.978802][T11776] 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Not tainted
[  457.985904][T11776] ------------------------------------------------------
[  457.992911][T11776] syz.5.1566/11776 is trying to acquire lock:
[  457.998958][T11776] ffff888028dcb6c0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0
[  458.008342][T11776] 
[  458.008342][T11776] but task is already holding lock:
[  458.015681][T11776] ffff888028dcb750 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0
[  458.025320][T11776] 
[  458.025320][T11776] which lock already depends on the new lock.
[  458.025320][T11776] 
[  458.035698][T11776] 
[  458.035698][T11776] the existing dependency chain (in reverse order) is:
[  458.044688][T11776] 
[  458.044688][T11776] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}:
[  458.052578][T11776]        __mutex_lock+0x19b/0xa60
[  458.057595][T11776]        blk_mq_sysfs_unregister_hctxs+0x92/0x2d0
[  458.063996][T11776]        __blk_mq_update_nr_hw_queues+0x93f/0x14e0
[  458.070481][T11776]        blk_mq_update_nr_hw_queues+0x2a/0x40
[  458.076527][T11776]        nbd_start_device+0x15b/0xd70
[  458.081879][T11776]        nbd_ioctl+0x21a/0xfd0
[  458.086620][T11776]        blkdev_ioctl+0x276/0x6d0
[  458.091630][T11776]        __x64_sys_ioctl+0x190/0x200
[  458.096905][T11776]        do_syscall_64+0xcd/0x250
[  458.101912][T11776]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.108313][T11776] 
[  458.108313][T11776] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[  458.116897][T11776]        blk_mq_submit_bio+0x1fb6/0x24c0
[  458.122521][T11776]        __submit_bio+0x384/0x540
[  458.127525][T11776]        submit_bio_noacct_nocheck+0x698/0xd70
[  458.133661][T11776]        submit_bio_noacct+0x93a/0x1e20
[  458.139186][T11776]        mpage_readahead+0x41d/0x590
[  458.144458][T11776]        read_pages+0x1a8/0xdc0
[  458.149290][T11776]        page_cache_ra_unbounded+0x3dc/0x750
[  458.155250][T11776]        force_page_cache_ra+0x24b/0x340
[  458.160859][T11776]        page_cache_sync_ra+0x110/0x9c0
[  458.166383][T11776]        filemap_get_pages+0xd7b/0x1be0
[  458.171908][T11776]        filemap_read+0x3ca/0xd70
[  458.176914][T11776]        blkdev_read_iter+0x187/0x480
[  458.182268][T11776]        vfs_read+0x87f/0xbe0
[  458.186923][T11776]        ksys_read+0x12b/0x250
[  458.191665][T11776]        do_syscall_64+0xcd/0x250
[  458.196673][T11776]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.203072][T11776] 
[  458.203072][T11776] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[  458.211572][T11776]        down_read+0x9a/0x330
[  458.216237][T11776]        filemap_fault+0x62c/0x2820
[  458.221416][T11776]        __do_fault+0x10a/0x490
[  458.226252][T11776]        do_pte_missing+0xebd/0x3e00
[  458.231518][T11776]        __handle_mm_fault+0x103c/0x2a40
[  458.237133][T11776]        handle_mm_fault+0x3fa/0xaa0
[  458.242409][T11776]        do_user_addr_fault+0x7a3/0x13f0
[  458.248020][T11776]        exc_page_fault+0x5c/0xc0
[  458.253025][T11776]        asm_exc_page_fault+0x26/0x30
[  458.258382][T11776]        rep_movs_alternative+0x13/0x70
[  458.263905][T11776]        _copy_from_user+0x9a/0xd0
[  458.269007][T11776]        do_sched_setscheduler+0x9f/0x2c0
[  458.274705][T11776]        __x64_sys_sched_setscheduler+0x75/0xa0
[  458.280928][T11776]        do_syscall_64+0xcd/0x250
[  458.285936][T11776]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.292339][T11776] 
[  458.292339][T11776] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  458.299875][T11776]        __might_fault+0x11b/0x190
[  458.304972][T11776]        _copy_from_user+0x29/0xd0
[  458.310069][T11776]        __blk_trace_setup+0xa8/0x180
[  458.315425][T11776]        blk_trace_ioctl+0x163/0x290
[  458.320686][T11776]        blkdev_ioctl+0x109/0x6d0
[  458.325704][T11776]        __x64_sys_ioctl+0x190/0x200
[  458.330975][T11776]        do_syscall_64+0xcd/0x250
[  458.335985][T11776]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.342387][T11776] 
[  458.342387][T11776] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  458.350193][T11776]        __mutex_lock+0x19b/0xa60
[  458.355202][T11776]        blk_register_queue+0x13c/0x4f0
[  458.360734][T11776]        add_disk_fwnode+0x785/0x1300
[  458.366179][T11776]        brd_alloc.isra.0+0x5a2/0x840
[  458.371545][T11776]        brd_init+0x12b/0x1d0
[  458.376206][T11776]        do_one_initcall+0x128/0x700
[  458.381479][T11776]        kernel_init_freeable+0x5c7/0x900
[  458.387188][T11776]        kernel_init+0x1c/0x2b0
[  458.392018][T11776]        ret_from_fork+0x45/0x80
[  458.396933][T11776]        ret_from_fork_asm+0x1a/0x30
[  458.402203][T11776] 
[  458.402203][T11776] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[  458.409744][T11776]        __lock_acquire+0x249e/0x3c40
[  458.415099][T11776]        lock_acquire.part.0+0x11b/0x380
[  458.420715][T11776]        __mutex_lock+0x19b/0xa60
[  458.425729][T11776]        blk_register_queue+0x132/0x4f0
[  458.431258][T11776]        add_disk_fwnode+0x785/0x1300
[  458.436608][T11776]        md_alloc+0x3c2/0x1080
[  458.441357][T11776]        md_probe+0x6e/0xd0
[  458.445845][T11776]        blk_request_module+0x115/0x1e0
[  458.451373][T11776]        blkdev_get_no_open+0x7a/0xe0
[  458.456723][T11776]        bdev_file_open_by_dev+0x6b/0x210
[  458.462511][T11776]        swsusp_check+0x74/0x420
[  458.467519][T11776]        software_resume+0x6d/0x400
[  458.472700][T11776]        resume_store+0x249/0x460
[  458.477707][T11776]        kobj_attr_store+0x55/0x80
[  458.482803][T11776]        sysfs_kf_write+0x117/0x170
[  458.488098][T11776]        kernfs_fop_write_iter+0x33d/0x500
[  458.493889][T11776]        vfs_write+0x5ae/0x1150
[  458.498723][T11776]        ksys_write+0x12b/0x250
[  458.503551][T11776]        do_syscall_64+0xcd/0x250
[  458.508562][T11776]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.514960][T11776] 
[  458.514960][T11776] other info that might help us debug this:
[  458.514960][T11776] 
[  458.525164][T11776] Chain exists of:
[  458.525164][T11776]   &q->sysfs_lock --> &q->q_usage_counter(io)#54 --> &q->sysfs_dir_lock
[  458.525164][T11776] 
[  458.539311][T11776]  Possible unsafe locking scenario:
[  458.539311][T11776] 
[  458.546734][T11776]        CPU0                    CPU1
[  458.552076][T11776]        ----                    ----
[  458.557431][T11776]   lock(&q->sysfs_dir_lock);
[  458.562090][T11776]                                lock(&q->q_usage_counter(io)#54);
[  458.569965][T11776]                                lock(&q->sysfs_dir_lock);
[  458.577137][T11776]   lock(&q->sysfs_lock);
[  458.581446][T11776] 
[  458.581446][T11776]  *** DEADLOCK ***
[  458.581446][T11776] 
[  458.589562][T11776] 8 locks held by syz.5.1566/11776:
[  458.594754][T11776]  #0: ffff88802ea8c0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390
[  458.603790][T11776]  #1: ffff888036dda420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250
[  458.612741][T11776]  #2: ffff888079456488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500
[  458.622467][T11776]  #3: ffff888140ad9788 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500
[  458.632633][T11776]  #4: ffffffff8e081688 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x63/0x400
[  458.642983][T11776]  #5: ffffffff8ecc0a28 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x29/0x1e0
[  458.652905][T11776]  #6: ffffffff8fa43608 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x1080
[  458.661603][T11776]  #7: ffff888028dcb750 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0
[  458.671684][T11776] 
[  458.671684][T11776] stack backtrace:
[  458.677558][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.5.1566 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0
[  458.688320][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  458.698357][T11776] Call Trace:
[  458.701619][T11776]  <TASK>
[  458.704533][T11776]  dump_stack_lvl+0x116/0x1f0
[  458.709203][T11776]  print_circular_bug+0x419/0x5d0
[  458.714233][T11776]  check_noncircular+0x31a/0x400
[  458.719157][T11776]  ? __pfx_check_noncircular+0x10/0x10
[  458.724603][T11776]  ? kernfs_add_one+0x39d/0x520
[  458.729439][T11776]  ? lockdep_lock+0xc6/0x200
[  458.734018][T11776]  ? __pfx_lockdep_lock+0x10/0x10
[  458.739027][T11776]  ? up_write+0x1b2/0x520
[  458.743342][T11776]  __lock_acquire+0x249e/0x3c40
[  458.748181][T11776]  ? __pfx___lock_acquire+0x10/0x10
[  458.753362][T11776]  ? sysfs_add_file_mode_ns+0x227/0x3b0
[  458.758895][T11776]  lock_acquire.part.0+0x11b/0x380
[  458.763989][T11776]  ? blk_register_queue+0x132/0x4f0
[  458.769172][T11776]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  458.774874][T11776]  ? rcu_is_watching+0x12/0xc0
[  458.779625][T11776]  ? trace_lock_acquire+0x14e/0x1f0
[  458.784814][T11776]  ? blk_register_queue+0x132/0x4f0
[  458.789998][T11776]  ? lock_acquire+0x2f/0xb0
[  458.794481][T11776]  ? blk_register_queue+0x132/0x4f0
[  458.799664][T11776]  __mutex_lock+0x19b/0xa60
[  458.804164][T11776]  ? blk_register_queue+0x132/0x4f0
[  458.809357][T11776]  ? kernfs_get+0x1f/0x30
[  458.813671][T11776]  ? kobject_add_internal+0x54e/0x990
[  458.819046][T11776]  ? blk_register_queue+0x132/0x4f0
[  458.824241][T11776]  ? __pfx___mutex_lock+0x10/0x10
[  458.829254][T11776]  ? kobject_add+0x17c/0x240
[  458.833850][T11776]  ? blk_register_queue+0x132/0x4f0
[  458.839128][T11776]  blk_register_queue+0x132/0x4f0
[  458.844147][T11776]  add_disk_fwnode+0x785/0x1300
[  458.848989][T11776]  md_alloc+0x3c2/0x1080
[  458.853227][T11776]  md_probe+0x6e/0xd0
[  458.857201][T11776]  ? __pfx_md_probe+0x10/0x10
[  458.861863][T11776]  blk_request_module+0x115/0x1e0
[  458.866873][T11776]  blkdev_get_no_open+0x7a/0xe0
[  458.871710][T11776]  bdev_file_open_by_dev+0x6b/0x210
[  458.876891][T11776]  swsusp_check+0x74/0x420
[  458.881289][T11776]  software_resume+0x6d/0x400
[  458.885953][T11776]  resume_store+0x249/0x460
[  458.890444][T11776]  ? __pfx_resume_store+0x10/0x10
[  458.895460][T11776]  ? __pfx_resume_store+0x10/0x10
[  458.900471][T11776]  kobj_attr_store+0x55/0x80
[  458.905048][T11776]  ? __pfx_kobj_attr_store+0x10/0x10
[  458.910318][T11776]  sysfs_kf_write+0x117/0x170
[  458.914982][T11776]  kernfs_fop_write_iter+0x33d/0x500
[  458.920250][T11776]  ? __pfx_sysfs_kf_write+0x10/0x10
[  458.925434][T11776]  vfs_write+0x5ae/0x1150
[  458.929747][T11776]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  458.935537][T11776]  ? __pfx___mutex_lock+0x10/0x10
[  458.940557][T11776]  ? __pfx_vfs_write+0x10/0x10
[  458.945308][T11776]  ksys_write+0x12b/0x250
[  458.949619][T11776]  ? __pfx_ksys_write+0x10/0x10
[  458.954461][T11776]  do_syscall_64+0xcd/0x250
[  458.958961][T11776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.964844][T11776] RIP: 0033:0x7fe336f85d29
[  458.969248][T11776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.988857][T11776] RSP: 002b:00007fe337d7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  458.997256][T11776] RAX: ffffffffffffffda RBX: 00007fe337175fa0 RCX: 00007fe336f85d29
[  459.005213][T11776] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005
[  459.013167][T11776] RBP: 00007fe337001aa8 R08: 0000000000000000 R09: 0000000000000000
[  459.021119][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.029079][T11776] R13: 0000000000000000 R14: 00007fe337175fa0 R15: 00007ffffcb76538
[  459.037045][T11776]  </TASK>
[  459.040148][    C0] vkms_vblank_simulate: vblank timer overrun
[  459.047358][   T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  459.060476][ T5870] IPVS: starting estimator thread 0...
[  459.064738][   T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24
[  459.077453][T11776] block device autoloading is deprecated and will be removed.
[  459.085902][T11776] syz.5.1566: attempt to access beyond end of device
[  459.085902][T11776] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  459.099759][T11776] PM: Image not found (code -5)
[  459.106320][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.125201][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.139451][ T5866] usb 5-1: USB disconnect, device number 84
[  459.147362][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.162708][T11777] IPVS: using max 71 ests per chain, 170400 per kthread
[  459.168424][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.189729][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.211327][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.232568][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.253895][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.275423][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.296662][   T46] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  459.414934][   T46] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  459.425511][   T46] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  459.439689][   T46] usb 1-1: USB disconnect, device number 86